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Slim  budgets  test 
users’  creativity 


■  BY  JENNIFER  MEARS 

With  the  economy  continu¬ 
ing  to  flag,  many  network 
executives  are  under  the  gun 
to  stay  within  IT  ^ 

budgets  that  are 
either  shrinking 
or  growing  more 
slowly  than  in 
past  years. 

They’re 
responding  by 
looking  for  bar¬ 
gains,  lengthening  buying 
cycles,  automating  network 
management,  off-loading 
noncore  projects  to  out¬ 
sourcers  and  delaying  non- 
critica!  undertakings. 

“Our  buying  habits  have 
changed  since  the  beginning 
of  the  year.  That’s  when  we 
really  started  changing  our 
focus,  tightening  down  the 


budget  and  being  more  effi¬ 
cient  with  how  we  spent  our 
money’ says  Gene  Rekos,CTO 
at  Teen.com.  “We  analyze 
things  a  little  bit  more  in  de¬ 
tail,  and  we  take 
a  little  bit  more 
time  to  make  a 
final  decision.” 

In  this  second 
part  of  a  three- 
part  series  about 
the  struggling 
economy’s 
effect  on  the  network  industry 
we  find  network  executives 
embarking  on  new  strategies, 
striving  to  meet  the  business 
guidelines  some  are  facing  for 
the  first  time. 

“In  the  past  they  could  get 
away  with  saying,  “This  isn’t 
about  saving  money;  it’s  about 
avoiding  costs  or  it’s  about 

See  Economy,  page  16 
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Microsoft  propping  Exchange  for 

Web  conversion 

Messaging  system  to  be  key  part  of  grand  .Net  plan. 


■  BY  JOHN  FONTANA 

ORLANDO  —  Microsoft  this  week  begins  integrat¬ 
ing  its  Exchange  2000  Server  into  the  vendor’s  all- 
encompassing  .Net  platform, and  network  executives 
will  get  a  first-hand  look  at  how  Web  services  will 
transform  the  messaging  and  collaboration  software. 

At  its  annual  Exchange  conference,  Microsoft 
will  show  how  Exchange’s  functions  can  be  called 
on  by  Web  services,  a  way  of  cobbling  together  ap¬ 
plications  on  the  fly  Exchange  features,  including 
messaging,  calendaring,  workflow  and  tasks,  cur¬ 
rently  have  to  be  custom  coded  into  individual 
applications. 

The  .Net  platform  is  Microsoft’s  plan  to  offer  soft¬ 
ware  as  a  service  available  over  the  Internet  to  any 
device.  Microsoft  is  betting  its  future  on  .Net  and 
focusing  $4  billion  in  research  and  development  on 
.Net  development  tools,  servers  and  software. 

Traditionally  a  haven  for  administrators,  this  year’s 
conference  —  which  is  expected  to  draw  5,000 
attendees  —  will  focus  heavily  on  developing  Web 
services.  And  while  Microsoft  plans  to  showcase 


■  MORE  MICROSOFT  NEWS 

Insids:  Sun,  others  prep  challenge  to  Microsoft's  Passport  single 
sign-on  technology.  PAGE  72. 

Online:  Watch  for  our  coverage  of  Microsoft’s 
Exchange  conference  online  this  week.  DocHnder:  6225 
www.nwfiisiM.con 
the  future,  many  IT  executives  are  still  battling  or 
have  yet  to  start  Exchange  2000  rollouts,  which 
need  to  be  completed  before  Web  services  can 
become  a  reality. 

But  customers  will  begin  to  see  where  Microsoft 
is  taking  Exchange.  With  .Net,  it  becomes  less  of  a 
self-contained  server  and  more  a  component  of 
the  .Net  infrastructure  that  includes  Windows 
2000,  SQL  Server,  Mobile  Information  Server  and 
BizTalk  Server. 

“Exchange  becomes  just  one  functional  mod¬ 
ule  in  a  bigger  picture,”  says  Jim  Kobielus,an  ana¬ 
lyst  with  The  Burton  Group  and  a  Network  World 
columnist. “It  provides  core  messaging  services  to 

See  Exchange,  page  73 


Start-ups  aim  to  man^e  Web  services 


■  BY  DENISE  PAPPALARDO 

ATLANTA  —  A  new  breed  of 
service  provider  is  aiming  to  help 
companies  exploit  Web  services, 
an  emerging  software  concept 


that  may  be  as  complex  as  it  is 
intriguing. 

Start-up  Flamenco  Networks 
last  week  became  the  latest 
company  to  launch  a  Web  ser¬ 
vice  offering  that  will  let  cus¬ 


tomers  create  applications  by 
stitching  together  software  com¬ 
ponents  on  the  fly. 

Web  services,  which  are  being 
promoted  by  companies  from 
BEA  Systems  to  IBM  to  Micro¬ 
soft,  will  let  applications  or 
clients  authorized  to  interact  do 
so  over  the  ’Net,  often  without 
human  intervention. 

While  the  idea  behind  Web  ser¬ 
vices  is  to  simplify  application  ac¬ 
cess,  communication  and  integra¬ 
tion  by  relying  on  a  set  of  stan¬ 
dards  such  as  the  XML  and 
Simple  Object  Access  Protocol 
See  Web  services,  page  14 
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against  a  virus  maker  in  the  Netherlands  and  one  of  the  few  such  verdicts  in  the  world. 
The  FBI  sent  the  court  a  report  saying  it  had  identified  55  Kournikova  victims  who  had 
suffered  $166,827  in  damages. 

Watch  out  for  flare-up 

■  A  major  solar  flare  is  expected  to  pass  over  Earth  on  Tuesday  and 
could  cause  some  electric  power  outages  and  disruptions  of  tele¬ 
phone  service  and  satellite  TV  signals.  Experts  at  the  NASA  Goddard 
Space  Flight  Center  say  a  fast-moving  flare  exploded  from  the  sun 
about  5:30  a.m.  last  Monday  The  flare  sent  out  a  large  cloud  of  solar 
magnetism,  which  is  expected  to  reach  Earth  late  Tuesday  afternoon 
or  early  evening.  Experts  say  power  grids,  ground-to-satellite  com¬ 
munications  and  electronic  navigation  systems  could  be  disrupted. 


Report  AT&T  courting  BellSouth 

■  Published  reports  say  AT&T  is  looking  to  merge  with  regional 
service  provider  BellSouth.  AT&T  and  BellSouth  representatives 
declined  to  comment  last  Friday  on  potential  merger  talks. 
Reportedly,  AT&T  President  David  Dornan  proposed  in  mid- 
September  a  merger  of  equals 
with  BellSouth,  in  which  the  two 
companies  would  form  a  com¬ 
bined  entity  to  take  on  Verizon 
Communications,  SBC  Com¬ 
munications  and  other  rivals. 

Under  the  deal,  code-named 
Brazil,  AT&T  would  spin  off  its 
much  sought  after  cable  busi¬ 
ness  and  merge  the  rest  with 
BellSouth.  The  value  of  the  deal 
and  the  management  of  the 
merged  company  are  reportedly 
still  in  negotiation. 

An  AT&T/BellSouth  merger 
would  undoubtedly  face  regula¬ 
tory  hurdles. 

Rich  get  richer,  sometimes 

■  Microsoft  paid  Bill  Gates,  its  chairman  of 
the  board  and  chief  software  architect,  a 
total  of  $666,754  in  fiscal  year  2001,  an  in¬ 
crease  of  4%  over  the  previous  year.  Gates 
received  a  salary'  of  $494,992  and  a  bonus  of  $171,762  in  the  12  months  ended  June 
30,  according  to  a  statement  filed  by  the  company  with  the  US.  Securities  and 
Exchange  Commission.  CEO  Steve  Ballmer  collected  a  salary  of  $494,076,  a  bonus  of 
$171, 444,  and  other  compensation  worth  $5, 100,  the  filing  said. 

Despite  the  “modest”  raise.  Gates  remained  the  richest  person  in  the  world  for  the 
eighth  year  in  a  row,  according  to  the  annual  survey  by  Forbes  magazine  of  the  400 
wealthiest  Americans.  All  wasn’t  rosy  for  Gates,  though,  as  his  net  worth  fell  to  $54  bil¬ 
lion  this  year,  down  from  $63  billion  last  year.  Mega  investor  Warren  Buffett  moved  into 
second  place,  followed  by  the  other  Microsoft  co-founder,  Paul  Allen.  Oracle  CEO 
Larr>'  Ellison  dropped  from  second  to  fourth. 

Kournikova  virus  maker  found  guilty 

■  Tlie  maker  of  the  Anna  Kournikova  e-mail  worm  that  spread  in  February  was  sen¬ 
tenced  Tliursday  to  150  hours  of  community  service  or,  if  21-year-old  Jan  de  Wit  choos¬ 
es  not  to  perform  the  community  service,  to  75  days  in  jail.  In  addition, a  CD-ROM  con¬ 
taining  thousands  of  viruses  that  was  confiscated  from  him  will  not  be  returned,  the 
court  in  Leeuwarden,  Netherlands,  said.  The  ruling  is  the  first  verdict  handed  down 


Judge  tells  Microsoft,  DOJ  to  sit  down  and  talk 

■  Confident  that  the  Department  of  Justice  and  Microsoft  can  come  to  a  fair  agreement, 
US.  District  Court  Judge  Colleen  Kollar-Kotelly  last  week  ordered  the  two  sides  in  the 
antitrust  case  to  enter  into  “intense  settlement  discussions”  between  now  and  Nov.  2. 
During  a  status  conference  at  the  US.  District  Court  for  the  District  of  Columbia,  Kollar- 
Kotelly  said  she  expects  the  sides  to  work  24  hours  a  day,  seven  days  a  week,  and  to  be 
reasonable  in  order  to  come  to  an  agreement  that  satisfies  both  parties.  If  no  settlement 
is  in  view  by  Oct.  12,  the  two  parties  are  ordered  to  submit  to  the  court  the  name  of  a 


mediator  to  assist  them, or  the  court  will  appoint  one  if  an  individual  cannot  be  agreed 
upon,  the  judge  said.  If  the  two  sides  still  cannot  come  to  agreement  by  Nov.  2,  the  judge 
proposed  a  schedule  for  continuing  with  the  remedy  phase  of  this  case  through  the  first 
part  of  2002.  Kollar-Kotelly  is  charged  with  deciding  what  remedies  should  be  applied 
to  Microsoft  to  break  its  monopoly  grip  on  the  operating  system  market. 

Cisco  seeks  E.piphany 

■  Cisco  and  E.piphany  last  week  announced  that  they  are  joining  forces  and  bundling 
a  variety  of  their  software  products  in  an  effort  to  make  customer  contact  centers  smarter. 
A  package  combining  Cisco’s  customer-contact  software  platform  and  E.piphany’s  E.5 
suite  of  Web-based  customer  relationship  management  applications  is  available 
immediately,  the  companies  said.  E.piphany’s  customer  intelligence  platform  will  be 
added  in  December. 

The  combined  software  package  is  designed  to  help  traditional  customer  call  and 
support  centers  offer  customer  contact  operators  real-time  access  to  customer  data, 
allowing  for  better  service.  Financial  details  of  the  agreement  were  not  di.sclosed.The 
name  of  the  software  package  and  pricing  were  not  available. 


The  Good  The  Bad  The  Ugly 

WorldCom  and  CEO  Bernie  Ebbers, 

while  not  sporting  the  best  track  record  with  past  acquisitions 
and  attempted  buyouts,  appear  to  have  done  customers  using 
Rhythms  NetConnections'  network  a  good  turn  by  swooping  in 
and  scooping  up  equipment  from  the  bankrupt  DSL  carrier 
and  keeping  high-speed  'Net  service  alive  for  them. 

Trouble  with  AT&T’  S  authentication  servers  last 
Tuesday  shut  out  hundreds  of  thousands  of  dial-up 
Internet  users  across  the  carrier's  U.S.  network. 

Of  course  many  of  those  users  would  prefer  to 
have  broadband  access  in  the  first  place,  but  that’s 
another  story. 

Universal  Plot,  a  company  that  runs  an  online  cemetery 
complete  with  DNA  storage  services,  just  happened  to  send  us  a  press 
release  on  its  business  last  week  —  assuring  us  that  we  shouldn't  read 
anything  into  the  timing  in  light  of  the  recent  terrorist  attacks. 
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Hosting  pioneer  Exodus  waves  a  white  fl^ 


■  BY  JENNIFER  MEARS 

SANTA  CLARA  —  Exodus 
Communications,  the  firm  that 
virtually  invented  Web  hosting 
and  went  on  to  become  a  dar¬ 
ling  of  the  Internet  boom,  has 
filed  for  Chapter  1 1  bankruptcy 
protection  in  an  attempt  to  reor¬ 
ganize  its  balance  sheet  and 
shed  its  crushing  debt. 

The  company  jumped  into  the 
nascent  e-business  scene  in  1994 
and  quickly  cornered  a  leader¬ 
ship  position 
in  the  fast¬ 
growing  Web 
hosting  mar¬ 
ket.  In  its  rush 
to  build  out 
data  centers 
and  garner 
market  share. 

Exodus  took  advantage  of  the 
friendly  capital  markets  and 
amassed  $3.5  billion  in  debt.  But 
then  the  bubble  burst.  Some  of 
Exodus’  biggest  prospects  —  dot¬ 
coms  and  application  service 
providers  —  began  to  fold,  and 
the  capital  markets  dried  up. 

So  while  Exodus  continued  to 
sign  new  customers  and  man¬ 
aged  to  post  revenue  that  ana¬ 
lysts  say  pushed  it  to  break  even, 
it  struggled  under  its  heavy  debt 
load.  Interest  payments  alone 
cost  $80  million  per  quarter, 
according  to  financial  analysts. 

CEO  William  Krause,  who  took 
over  less  than  a  month  ago  after 
founding  CEO  Ellen  Hancock 


abruptly  resigned,  determined 
Chapter  1 1  was  the  only  way 
out.  While  in  bankruptcy  protec¬ 
tion,  Exodus  will  not  be  respon¬ 
sible  for  the  interest  payments 
or  other  debt  accrued  before 
the  filing,  Krause  says. 

The  task  now  is  to  negotiate 
with  creditors  and  come  up 
with  a  plan  to  emerge  from 
bankruptcy  protection.  As  an 
example  of  how  it  can  be  done, 
Krause  points  to  Covad  Com¬ 
munications,  which  recently 
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filed  for  Chapter  1 1  with  a 
prepackaged  deal  that  elimi¬ 
nates  its  debt,  giving  bondhold¬ 
ers  19  cents  on  the  dollar  and 
preferred  stock  in  the  company. 

When  it  filed  for  Chapter  1 1  in 
US.  Bankruptcy  Court  in  Wil¬ 
mington,  Del.,  last  week.  Exodus 
listed  $5.9  million  in  assets  and 
$4.4  million  in  liabilities.  It  also 
said  it  has  $200  million  of  new 
debtor-in-possession  financing 
from  GE  Capital,  contingent  on 
bankruptcy  court  approval, 
which  will  help  keep  the  com¬ 
pany  going. 

Exodus  is  the  biggest  Web 
hoster  in  the  market  with  more 
than  4,000  customers,  including 


some  of  the  biggest  names  in 
the  business  such  as  Yahoo, 
eBay  and  Microsoft.  It  has  5.6 
million  square  feet  of  space  in 
44  data  centers  worldwide,  but 
analysts  estimate  it’s  running  at 
a  30%  utilization  rate,  and  as  low 
as  10%  in  some  facilities. 

“Their  business  model  was 
essentially  building  ahead  of 
demand,”  says  Jay  Slattery,  an 
analyst  with  Technology  Bus¬ 
iness  Research.  “There  was  this 
expectation  that  the  demand 
for  data  center 
space  was  going 

_  to  continue  to 

grow  exponen¬ 
tially.  So  when 
this  demand 
didn’t  material¬ 
ize,  they  were 
stuck  with  all 
these  data  centers.” 

Exodus  even  continued  to 
build  out  after  demand  had 
slowed:  Last  year  it  acquired 
Global  Crossing’s  hosting  sub¬ 
sidiary,  Global  Center,  and 
opened  four  new  data  centers  in 
the  second  quarter  of  this  year. 

“They  started  putting  customers 
in  newer  data  centers  without  fill¬ 
ing  up  the  ones  they  had,”  says 
Andrew  Schroepfer,  president  of 
Tier  1  Research.  So  as  the  market 
started  falling  off,  they  had  a  por¬ 
tion  of  each  center  in  use  and 
couldn’t  turn  any  of  the  center 
back  to  the  market,  he  says. 

Analysts  say  Exodus  is  a  bell¬ 
wether  of  the  hosting  industry 


The  writing  on  the  wall 

Exodus’  many  trials  and  tribulations: 


April  26 

Exodus  posts  $118.3 
million  Q1  loss  and 
cuts  capital 
expenditures  by 
$300  million. 

April  30 

CFO  Marshall 
Case  resigns. 


May  1 

Exodus  confirms 
COO  and  chief 
marketing  officer 
are  leaving. 


Mays 

Exodus  announces  it 
will  cut  675  jobs,  or 
about  15%  of  its  staff. 


EXODUS® 

June  20 

Exodus  lowers  its  revenue 
projections  and  announces 
another  round  of  layoffs. 


July  26 

•  Exodus  posts  02  loss  of 
$138.5  million. 

•  Exodus  reports  cash  reserves 
of  $616  million,  down  from  $1 
billion  at  end  of  QL 

•  Exodus  says  it  expects  to  end 
the  year  with  $200  million  in 
cash,  but  says  it  is  looking  for 
more  funding. 


I  April  2001 

August  7 
CEO  Ellen 
Hancock 
tells  Network  World 
Exodus  would  consider 
take-over  offers. 


I 


August  23 
Three  members 
of  the  Exodus 
board  of  direc¬ 
tors  step  down. 


September  4 

Hancock  abruptly  resigns, 
board  member  William 
Krause  takes 
over  as  chair¬ 
man  and  CEO. 


I' 

i  t 


September  26 - 

•  Exodus  files  voluntary  petition 
to  reorganize  under  Chapter  11  of 
the  U.S.  Bankruptcy  Code. 

*  Exodus  receives  $200  million  from 
GE  Capital,  pending  bankruptcy 
court  approval,  to  help  fund 
operations  during  restructuring. 


Bankruptcy  basics 


Many  people  believe  that  filing  for  bankruptcy  protection 
means  “the  end”  for  a  business.  While  that's  true  in  a 
Chapter  7  bankruptcy  filing,  in  Chapter  11,  filing  for 
bankruptcy  is  only  the  first  step  in  a  process  that  can  see  the 
business  reorganized,  sold  to  another  company  or  liquidated. 

In  a  Chapter  7  filing,  the  business  is  committed  to  liquidat¬ 
ing  its  assets.  A  trustee  is  put  in  charge  of  the  business, 
sells  the  assets  and  tries  to  satisfy  the  demands  of  any 
creditors. 

"if  there's  no  prospect  of  reorganization,  businesses  will  file 
for  Chapter  7,"  says  Christian  Onsager,  general  counsel  to 
The  Broe  Companies  in  Denver  and  a  faculty  member  of  the 
American  Bankruptcy  Institute,  an  organization  dedicated  to 
bankruptcy  research  and  education. 

In  a  Chapter  11  filing,  the  management  of  a  business  main¬ 
tains  control  and  can  either  liquidate  the  company  or  file  a 
reorganization  plan. 

The  reorganization  involves  negotiating  a  deal  with  credi¬ 
tors.  Even  if  creditors  refuse  to  accept  the  terms  of  the  reor¬ 
ganization,  they  can,  under  certain  circumstances,  be  forced 
to  make  a  deal  with  the  company. 

Many  reorganizations  involve  creditors  getting  a  fraction  of 
what  they  are  owed  in  cash  as  well  as  some  stock  in  the 
bankrupt  company. 

As  part  of  the  reorganization,  bankrupt  firms  can  sell  off 
certain  assets  or  business  units.  If  a  reorganization  won’t 
work,  the  company  can  be  liquidated. 

—  Michael  Martin 


been  moving  into  that  area,  dis¬ 
tancing  itself  from  its  dot-com 
customer  base  and  its  roots  in 
collocation,  in  which  it  provided 
nothing  more  than  living  quar¬ 
ters  for  Web  servers.  In  the  sec¬ 
ond  quarter,  the  company 
reported  63%  of  its  customers 
were  corporations  compared  to 
45%  a  year  earlier. 

Analysts  say  Exodus  must 
hang  on  to  that  customer  base 
as  it  restructures.  Already,  some 
customers  are  planning  to  move 
out  of  Exodus’  facilities,  al¬ 
though  most  seem  ready  to  stick 
it  out,  albeit  with  contingency 
plans  in  place. 

“We  have  been  in  close  contact 
with  Exodus  and  we  don’t  antici¬ 
pate  Exodus’  filing  for  bankruptcy 
will  have  any  immediate  or  signif¬ 
icant  impact  on  Yahoo  service," 
says  Kevin  Pimmons,  director  of 
operations  at  Yahoo. 

“We  understand  [last  week’s] 
events  are  a  positive  step  for 
Exodus,  and  we  will  remain  a 
partner  of  theirs,”  he  adds.  ■ 


which  now  must  focus  on  reach¬ 
ing  profitability  rather  than 
building  out  facilities  and  chas¬ 
ing  market  share. 

It’s  a  focus  Krause  says  he’s 
committed  to. 

“The  fundamental  focus  for 
Exodus  is  managing  for  prof¬ 
itability  vs.  revenue  growth  at  any 
cost,”  Krause  says.  “During  the 
dot-com  boom,  it  was  market 
share  and  revenue  growth  at  any 
cost.  And  it’s  easy  to  get  caught 
up  when  the  line  is  going  from 
the  lower  left  to  the  upper  right 
at  a  60-degree  angle  that  it’s 
going  to  go  on  forever.” 

It  didn’t  go  on  forever  —  but 
that  doesn’t  mean  the  Web  host¬ 
ing  business  is  inherently 
flawed,  analysts  say.  Market 
research  firm  IDC  estimates  the 
market  will  grow  from  $7  billion 
this  year  to  nearly  $25  billion  in 
2004.  Much  of  that  revenue 
comes  from  higher-revenue-gen¬ 
erating  managed  services  that 
are  demanded  by  larger  enter¬ 
prise  customers.  Exodus  has 
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Fast.  Mobile.  Secure. 

Experience  100  Mbps  wireless  networking  in 
your  conference  room,  classroom,  or  office 
with  Harmony  802.11a.  Harmony  is  a  multi- 
standard  family  of  high  performance  wireless 
LAN  products  that  help  you  intelligently  deploy 
the  new  IEEE  802.11a  wireless  technology 
along  with  802.11b.  With  standard  speeds 
of  up  to  54  Mbps,  Harmony  802.11a  products 
are  further  enhanced  by  Proxim's  2X  mode, 
delivering  speeds  up  to  100  Mbps.  Harmony's 
enhanced  security,  low  cost  of  ownership, 
and  flexibility  make  it  the  perfect  choice  for 
today's  high-speed  mobile  enterprise. 
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Pack  links 
internal  and 
external  net 
security 

■  BY  ELLEN  MESSMER 

Secure  Computing  this  week  j 
will  announce  an  authentica-  j 
tion  server  package  that  eases 
security  administration  and  im-  ^ 
proves  the  vendors  current  pro-  j 
duct  by  allowing  internal  and 
external  Web  access  to  be  man¬ 
aged  via  one  server  and  one  i 
database,  rather  than  two.  | 

The  SafeWord  PremierAccess 
server  and  agent  software  will  let 
customers  centrally  manage  ac¬ 
cess  to  intranet  and  extranet  re¬ 
sources  while  adding  support  for  ; 
new  authentication  technolo¬ 
gies  such  as  SafeWord’s  so-called 
virtual  smart  card  software.  That 
code  can  be  downloaded  from 
the  SafeWord  server  running  on 
Windows  NT  or  Unix-based 
boxes  onto  a  laptop  or  PC’s  com-  i 
puter  chip  so  the  device  can  au-  ; 
thenticate  itself.  Customers  beta- 
testing  this  authentication  say  it  j 
provides  an  extra  layer  of  securi¬ 
ty  when  combined  with  other 
authentication  processes,  such 
as  simple  password  or  digital  ’ 
certificate.  | 

PremierAccess  also  includes  a 
centralized  database  to  store  ■ 
information  about  all  the  authen¬ 
tication  types  used  within  an 
organization,  something  lacking 
in  the  earlier  version. 

“Before  we  had  separate  data-  ! 
bases  [that  controlled]  Web  ac-  | 
cess  for  internal  systems  and 
external  ones,"  says  Patrick  Prue, 
manager  of  network  services  at 
Fanton  Technologies,  an  Ontario 
manufacturer  of  floor-care  prod¬ 
ucts.  “This  is  much  more  flexible 
and  lets  us  have  one  centralized 
user  database.” 

Prue  says  his  staff  allocates  sim¬ 
ple,  reusable  passwords  to  most 
employees.  But  passwords,  all  too 
easily  shared,  are  not  considered 
particularly  strong  authentica¬ 
tion.  Better  .security  is  provided 
through  scxalled  handheld  tok¬ 
ens,  such  as  Secure  Computing’s 
Silver  devi.  e. which  can  generate 
a  one-time  dynamic  password 
Prue  distri'  these  tokens  to 
many  Fanton  employees  need¬ 
ing  access  te  sensitive  in¬ 
formation.  But  these  tokens  have 
their  own  set  of  issues;  they  can 
See  Secure,  page  16 


Tools  to  spotlight  net  performance 


■  BY  DENISE  DUBIE 

ALVISO,  CALIF  —  ProactiveNet 
plans  to  release  by  year-end  three 
tools  to  help  companies  measure 
the  performance  of  their  net¬ 
works  in  new  ways. 

ProactiveNet  will 
unveil  two  products, 
ProactiveAssurance 
and  ProactiveWeb, 
and  update  its  flag¬ 
ship  ProactiveNet 
performance  mon¬ 
itoring  software. 

ProactiveAssur¬ 
ance  software  measures  how  a 
new  application  affects  a  net¬ 
work’s  performance.  Hurwitz  ana¬ 
lyst  Jasmine  Noel  says  that  in  the 
past  companies  painstakingly 
tested  new  applications  before 
deploying  them  on  a  live  net¬ 
work,  but  with  time  demands  on 
companies  to  get  up  and  running 


Proactive  performance 

ProactiveWeb  tracks  the  response  time  of  Web 
transactions. 
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IBM  bolsters  WebSphere 

New  programs  support  more  third-party  applications. 


■  BY  KATHLEEN  OHLSON 

SOMERS,  N.Y  —  With  an  eye  toward  helping  busi¬ 
nesses  integrate,  grow  and  manage  Web  software 
and  services,  IBM  last  week  enhanced  the  programs 
that  support  its  flagship  WebSphere  applications 
server. 

The  new  programs  run  in  conjunction  with  IBM’s 
WebSphere  4.0  Server  program,  released  in  June.The 
enhanced  programs.  Enterprise  Edition  4.0, 
WebSphere  Edge  Server  and  Site  Analyzer,  promise  to 
help  customers  better  integrate  disparate  applica¬ 
tions,  more  effectively  analyze  browsing  behavior 
and  improve  overall  Web  site  performance. 


Big  Blue  makes  gains 
in  app^aei*veiLmai*kat 

According  to  a  Giga  forecast,  IBM  will  close 
in  on  BEA  Systems’  lead  in  2001,  with  a  34% 
share  compared  with  BEA’s  36%  share. 
This  is  what  the  appliciation  server  market 
looked  like  last  year: 


Application  server  market  share,  2000 


others:  8% 

Iona:  1% 

Macromedia/ Allaire: 
SilverStream:  3% 
HP/Bluestone:  3% 
Oracle:  3% 

Sybase:  4% 
iPlanet/Sun:  9% 


Total:  $1.58  billion 


WebSphere  Enterprise  Edition  4.0  features  a  new 
set  of  snap-on  modules  that  would  integrate  dis¬ 
parate  enterprise  applications  such  as  SAP’s  cus¬ 
tomer  relationship  management  programs  and 
IBM’s  CICS  transactions. 

The  modules  also  let  users  integrate  ActiveX,  Ch-h, 
Corba  and  non-Java  applications.  The  package  in¬ 
cludes  a  tool  called  Business  Rule  Beans  that  lets 
businesses  tweak  and  reuse  software  without  rewrit¬ 
ing  entire  sections  of  code. 

WebSphere  Enterprise  Edition  also  includes  the 
ability  to  identify  which  country  users  are  logging 
on  from,  displaying  the  appropriate  time  zone,  cur¬ 
rency  conversion  and  language  for  customers. 

IBM  says  the  idea  is  to  help  users  coordinate  mul¬ 
tiple  transactions  that  support  Java  2  Platform 
Enterprise  Edition  (J2EE)  and  popular  Web  services 
standards  to  process  ebusiness  communications 
more  effectively 

Edge  Server  2.0  features  load-balancing  capabil¬ 
ity  that  lets  users  distribute  application  workload 
evenly  across  IBM  Web  servers  on  a  network.  Here, 
IBM  is  hoping  to  bolster  Web  site  availability  and 
performance.  Edge  Server  prioritizes  traffic  and 
implements  quality  of  service  based  on  what  con¬ 
tent  is  being  accessed. 

Finally  Site  Analyzer  4.0  will  let  businesses  trace 
and  more  effectively  analyze  customer  behavior  on 
their  sites. 

IBM  is  trying  to  catch  up  to  BEA  Systems,  while 
keeping  a  leg  up  on  other  companies  also  clamor¬ 
ing  for  application  server  customers.  According  to  a 
Giga  Information  Group  study,  revenue  of  J2EE 
application  servers  totaled  $1.58  billion  in  2000. 

Pricing  for  WebSphere  Enterprise  Edition  4.0  is 
$35,000,  and  $20,000  per  CPU  for  Site  Analyzer. 

Edge  Server  starts  at  $10,000.  ■ 


on  the  Web,  the  test  phase  has 
shortened. 

“Usually,  the  network  people  dis¬ 
cover  this  new  code  or  applica¬ 
tion  after  there’s  been  a  huge 
problem,”  Noel  says.  Proactive- 
Assurance  lets  users  see  the 
impact  of  a  new  application  on 
the  network,  rather  than  work 
with  the  predictions  that  net 
modeling  software  may  offer. 

“The  data  is  real,  and  it’s  from 
the  live  network,”  she  says. 
“Predictive  software  .  .  .  can 
never  cover  everything.” 

ProactiveAssurance  will  cost 
less  than  $25,000. 

ProactiveWeb  monitors  re¬ 
sponse  time  for  Web  transactions. 
Although  companies  such  as 
Keynote  can  tell  users  how  their 
network  performs  from  other 
points  on  the  Internet,  Proactive- 
Net  says  those  statistics  come 
from  simulated  transactions,  not 
real  Web  site  performance  data. 

ProactiveWeb  is  designed  to 
give  small  users  an  idea  of  their 
Web  site’s  performance  for 
$1,000.  The  software  uses  one 
agent  to  monitor  up  to  50  Web 
site  transactions. 

ProactiveNet’s  flagship  soft¬ 
ware  uses  statistical  analysis  to 
determine  the  normal  operating 
behavior  of  networks,  applica¬ 
tions  and  servers,  and  alerts  net¬ 
work  managers  when  abnormal 
patterns  have  occurred.  This 
information  can  help  users  pre¬ 
vent  a  problem  before  it  slows 
network,  application  and  Web 
site  performance,  the  company 
says. 

The  new  version  of  Proactive- 
Net  would  be  installed  on  a  serv¬ 
er,  communicating  with  software 
agents  on  the  servers  to  be  moni¬ 
tored. The  agents  process  no  data 
and  sit  dormant  until  Proactive- 
Net  software  requests  specific 
performance  data. 

Although  ProactiveNet  says  its 
software  can  be  used  as  the  main 
root-cause  analysis  tool  on  a  net¬ 
work,  the  software  also  will  work 
with  Hewlett-Packard,  Computer 
Associates,Tivoli  and  BMC. 

“It  gives  users  the  ability  to 
know  what’s  a  problem  and 
what’s  just  another  alarm,”  Noel 
says.  “It  will  prevent  net  manager 
from  having  to  get  up  at  3  in  the 
morning  every  time  the  network 
crosses  some  threshold." 

ProactiveNet  4.1  costs  between 
$50,000  and  $150,000. 

ProactiveNet:  www.proactive 
net.com 


Tired  of  too-good-to-be-true  sale  prices 
making  you  look  bad?  Then  you'll  love 
the  deals  HP  is  offering  on  Vectra  desktop 
computers.  Vectra  is  easy  to  manage  and 
support,  and  uses  an  Intel®  Pentium®  III 
processor  to  give  you  the  speed  and 
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WoridCom,  SBC  go  DSL  shopping 

Purchases  of  Rhythms,  Prodigy  could  boost  broadband  access  offerings. 


■  BY  MICHAEL  MARTIN 

WorldCom  and  SBC  Commun¬ 
ications  have  strengthened  their 
Internet  services  arms  —  World¬ 
Com  by  picking  up  bankrupt 
DSL  provider  Rhythms  NetCon¬ 
nections  and  SBC  by  acquiring 
what  it  didn’t  already  own  of  ISP 
Prodigy. 

The  WorldCom  deal  has  imme 
diate  impact,  because  officials 
say  WorldCom  will  keep  remain¬ 
ing  Rhythms  customers  in  31  mar¬ 
kets  up  and  running.  It  also  helps 
fill  a  void  in  the  service  provider’s 
product  portfolio,  analysts  say 

For  $40  million  —  considered  a 
bargain  by  observers  —  World¬ 
Com  picked  up  most  of  Rhythms’ 
assets,  which  include  700  central 
offices  in  major  markets. 


Rhythms  filed  for  Chapter  1 1 
bankruptcy  protection  in  August 
and  planned  to  shut  down  its  en¬ 
tire  network  in  early  September. 
However,  the  Federal  Commun¬ 
ications  Commission  stepped  in 
and  ordered  the  provider  to 
maintain  service.  That  order 
ended  the  same  day  WorldCom 
revealed  its  bid. 

The  purchase  represents  a 
minor  victory  for  the  FCC,  which 
had  tried  to  avoid  a  repeat  of  the 
shutdown  of  DSL  provider  North- 
Point  Communications  earlier 
this  year.  NorthPoint’s  demise  left 
tens  of  thousands  of  DSL  users 
with  no  service. 

WorldCom  and  Rhythms  al¬ 
ready  had  a  close  relationship. 
WorldCom  owned  a  minority 
stake  in  the  carrier  and  resold 


DSL  in  demand 

Fresh  acquisitions  by 
WoridCom  and  SBC 
couid  heip  them  gain 
iarger  shares  of  a  DSL 
service  market 
expected  to  tripie  from 
4.5  miiiion  subscribers 
this  year  to  neariy 
14  miiiion  subscribers 
by  2004. 

SOURCE:  TELECHOICE 

Rhjdhms’  DSL  service.  Although 
WorldCom  already  had  some 
DSL  customers,  the  numbers 
were  not  that  impressive,  says 
Adam  Guglielmo,  an  analyst 


Siebei  to  unwrap  CRM  suite 


■  BY  ANN  BEDNARZ 

CHICAGO  —  Dave  Martinson  is 
traveling  to  Chicago  this  week  for 
one  thing:  To  see  Siebei  Systems 
roll  out  its  long-awaited  Siebei  7 
customer  relationship  manage¬ 
ment  package. 

“We  will  definitely  upgrade,” 
Martinson  says.  He  is  vice  presi¬ 
dent  of  the  Upper  Midwest 
Siebei  Users  Group  and  a  soft¬ 
ware  manager  in  charge  of  inter¬ 
nal  CRM  applications  at  Micro¬ 
soft  Great  Plains,  where  850  to 
900  employees  and  partners  use 
Siebel’s  salesforce  automation 
software. 

How  quickly  the  Great  Plains 
division  upgrades  depends  on 
what  Martinson  sees  at  the  Siebei 
Worldwide  User  Week  confer¬ 
ence  and  whether  the  new  edi¬ 
tion  meets  his  company’s  expec¬ 
tations,  he  says. 

WTiat  he’ll  see  is  Siebei  7  eBus¬ 
iness  Application  Suite,  which 
features  a  Web-based  architec¬ 
ture  that  Siebei  promises  will 
speed  its  CRM  deployment  and 
ease  application  administration. 
The  Siebei  7  portfolio  will  be  de¬ 
livered  through  a  Web  browser 
without  requiring  code  to  reside 
on  every  client. 

For  network  executives,  Web- 
based  deployment  translates  into 
easier,  less  costly  software  deploy¬ 
ments,  savs  Richard  Gorman,  a 
Siebei  vice  president. 


It’s  an  improvement  for  end 
users  too,  Martinson  says.  “Users 
will  get  the  most  recent  features 
much  quicker  because  we’ll  be 
able  to  deliver  patches  and  up¬ 
grades  to  them  much  quicker’’ 
he  says. 

The  Web-based  application 
suite  also  will  appeal  to  midsize 
companies  that  are  looking  for 
less-complex  applications  from 
Siebei,  the  market  leader  in 
large  enterprise  CRM. 

AMR  Research  analyst  Kevin 
Scott  says  Siebei  7  makes  strides 
in  the  right  direction.“lt’s  easier  to 
host,  it’s  easier  to  manage,”  he 
says.  “Companies  don’t  need  a 
huge  IT  staff  to  maintain  it.” 

Additional  highlights  of  Siebei  7 
include: 

•  Unicode  support.  New  in  Sie 
bel  7  is  support  for  the  Unicode 
standard  —  which  defines  a  sin¬ 
gle  set  of  characters  for  all  written 
languages  —  across  IBM  DB2, 
Microsoft  SQL  Server  and  Oracle 
databases.  Tliis  lets  companies 
store  multiple  languages  in  a  sin¬ 
gle  database. 

•  Upgrade  shortcuts.  With  its 
new  “one-button  upgrade”  tool. 


^Web 
I  Applications 
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Siebei  lets  users  copy  software 
customizations  and  changes  cre¬ 
ated  in  a  previous  version  of 
Siebel’s  software  to  Siebei  7, 
Gorman  says.  Embedded  process 
rules,  such  as  how  a  pricing 
change  is  approved,  don’t  need  to 
be  recreated  in  the  new  version. 

•  Access  for  disconnected 
users.  With  Siebei  7,  mobile  users 
can  work  from  a  locally  stored 
database  —  with  the  same  user 
interface  —  when  they  are  un¬ 
able  to  make  a  network  connec¬ 
tion.  Siebel’s  Web  client  uses  a 
JavaScript  engine  that  creates  the 
feel  of  a  Windows-based  applica¬ 
tion  with  pull-down  menus,  while 
it  reduces  the  amount  of  informa¬ 
tion  that  must  travel  over  the  net¬ 
work,  the  company  says. 

•  E-mail  management  tools. 
Siebei  added  new  e-mail  analysis 
and  autoresponse  capabilities  to 
its  service  applications.  For  exam¬ 
ple,  a  call  center  agent’s  answers 
to  customers’  questions  could  be 
automatically  stored  and  then 
shared  with  other  agents,  or  used 
as  a  standard  reply  when  similar 
questions  are  asked. 

•  Wireless  enhancements.  Sup¬ 
port  for  Wireless  Application  Prot¬ 
ocol  and  voice  recognition  will 
let  users  access  Siebei  applica¬ 
tions  from  cell  phones  and  PDAs. 

Siebei  7  will  be  available  be¬ 
fore  the  end  of  November.  Vert¬ 
ical  applications  will  follow  60 
to  90  days  after  that,  he  says.  ■ 


with  TeleChoice. 

“This  helps  round  out  their 
product  line,”  Guglielmo  says. 
“They  can  give  enterprises  an¬ 
other  option  for  their  branch 
offices  and  telecommuters.” 

While  Rhythms’  customers 
should  be  happier  now  that  they 
have  a  carrier  with  deep  pockets 
providing  service,  it  remains  to  be 
seen  whether  WorldCom  can  be 
more  successful  making  money 
off  DSL  than  Rhythms  was. 

“The  issues  are  still  there,”  says 
Matt  Davis,  an  analyst  with  The 
Yankee  Group.“lt’s  still  a  question 
of  whether  they  can  get  enough 
penetration  into  each  facility  to 
pay  for  the  DS-3  backhaul.” 

Interexchange  carriers  such  as 
WorldCom  have  been  relatively 
unsuccessful  in  penetrating  the 
DSL  market  until  now,  deploying 
just  26,000  lines  in  the  U.S.,  ac¬ 
cording  to  TeleChoice.  That  fig¬ 
ure  compares  with  3  million 
rolled  out  by  incumbent  local 
exchange  carriers  and  500,000 
by  competitive  local  exchange 
carriers. 

Meanwhile,  SBC’s  offer  to  buy 
the  remaining  outstanding  shares 
of  Prodigy  for  about  $378  million 
cements  what  was  already  a  close 
relationship  between  the  regional 
Bell  operating  company  and  ISP 

The  closer  ties  to  Prodigy  could 
add  marketing  expertise  and 
customer  service  to  bolster  SBC’s 
DSL  efforts,  Guglielmo  notes.  But 
any  change  will  be  felt  in  the  res¬ 
idential,  rather  than  the  business 
services  market.  ■ 


Corrections 


I  The  story  "10  Gig  enterprise 
infiltration"  (Sept.  24,  page  58) 
should  have  stated  that  Cisco 
announced  10  Gigabit  Ethernet 
modules  for  its  Catalyst  6500 
switch  and  Cisco  7600  router 
last  month. 

I  In  the  story  "Has  Cisco's 
i/VlO  lived  up  to  the  early 
/pe?"  (Sept.  17,  page  20), 
iliage  Care  says  comments 
■om  one  of  its  employees  were 
lisinterpreted.  The  organization 
jys  it  is  not  looking  to  replace 
(isting  Mitel  equipment  with 
isco  gear. 
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The  hp  netserver. 
Developed  by  gifted  engineers, 
priced  by  someone  else. 


Pentium-/// 


Now  you  con  get  on  ingenious  HP 
Netserver  at  a  downright  silly  price. 
HP  Netservers  ore  reliable  and  fast,  and 
feature  Intel®  Pentium®  III  processors.  And 
Netserver  has  the  memory  and  storage  you 
need  to  keep  your  business  up  and 
running.  For  a  limited  time,  get  0%  apr 
financing*  on  selected  e800  Netservers. 
HP's  hottest  servers  at  their  lowest  prices 
ever.  Now  that's  savings  you  can  rely  on. 


invent 


hp  netserver  eSOO 

•  Intel®  Pentium®  III  processor  866MHz 
W/256KB  L2  cache  •  128MB  ECC  SDRAM 

•  9.1GB  SCSI  HDD  •  40x  Max-speed 

CD-ROM  •  0%  apr  financing*  available  - 
contact  your  local 
reseller  by  calling 
888.276.9876  or  visit 
www.bstore.hp.com  SKU  P2458A 

Offer  ends  October  31,  2001 . 


Call  1.800.243.9812,  contact  your  local  reseller,  or  visit  www.hp.com/go/bizsku37 


*0%  opr  ftnoncing  bosed  upon  a  24<TK>nlh  financing  term  and  subject  to  final  HP  credit  appfovd.  Minimum  financed  amount  is  $1500.  More  tfton  one  new  server  may  need  to  be  purchosed  to  qualify.  Estimated  street  price  for  the  e800  P2458A  is  $949,  e800  P2460A 
is  $1499.  Estimate  monthly  payment  is  $39  ond  $^  respectively  Actual  prices  may  vory.  Offer  expires  October  31,  2001 .  Intel,  the  Intel  Inside  logo  and  Pentium  are  registered  trodemarks  of  Intel  Corporation.  ®2001Hewtett^ockard  Compony.  All  rights  reserved. 
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Doing  the 
Flamenco 


start-up  Web  services  provider 
Flamenco  aims  to  help  companies  tie 
key  business  applications  with  those 
of  trading  partners. 


©Trading  partner  site 


o 

Manufacturing 

company 


ip 

IT 

ip 

o 

Flamenco 
management 
center  in  Atlanta 


Peerto-peer  communication 
between  Flamenco  proxies 


Management  servers 


O  Flamenco  proxy  software 
resides  on  a  Web  server  at 
each  site  to  be  linked.  The 
proxy  maintains  customer- 
defined  rules  centrally 
managed  by  Flamenco. 


©  A  typical  rule  could  be  the 
schedule  for  when  trading 
partners  will  communicate 
inventory  data.  The 
communications  is  direct, 
peer-to-peer. 


©  Customers  can  access 
Flamenco’s  management 
site  to  access  statistics 
about  traffic  delivery  and 
Web  services  usage, 
including  response  times. 


Trio  squares 
off  with  new 
Unix  servers 

■  BY  APRIL  JACOBS  AND  DENI 
CONNOR 

NEW  YORK  —  Users  will  soon 
have  the  luxury  of  high-end, 
mainframe-like  server  features 
—  including  the  ability  to  han¬ 
dle  large  volumes  of  electronic 
transactions  —  with  a  new  gen¬ 
eration  of  powerful  servers  from 
IBM,  Sun  and  Hewlett-Packard. 

IBM  is  set  to  roll  out  its  high- 
end  server,  dubbed  Regatta,  this 
week.  Sun  introduced  its  Sun 
Fire  15K  server  last  week,  while 
HP  debuted  its  HP  Server 
rpS-IOO.  HP  already  ships  its 
Superdome,  a  high-end  Unix 
box  that  competes  in  this  arena. 

The  servers  are  also  designed 
for  high-end  database  transac¬ 
tions  and  performance-inten¬ 
sive  scientific  applications.They 
feature  mainframe-like  charac¬ 
teristics,  such  as  partitioning, 
which  lets  customers  divide  a 
system  into  logical  parts  that 
can  run  multiple  operating  sys¬ 
tems  or  applications. 

Other  advanced  features,  such 
as  the  ability  to  rapidly  recover 
from  memory  failures,  provide 
capacity  on  demand  and  load 
balance  work  across  multiple 
internal  processors,  also  perme¬ 
ate  the  new  servers. 

The  guiding  principles  behind 
this  bracket  of  boxes  are  to  help 
users  reduce  maintenance  and 
support  costs  by  consolidating 
low-end,  highly  distributed  serv¬ 
er  farms  and,  at  least  in  Sun  and 
HP’s  cases,  replace  mainframe 
systems  that  can  cost  millions  to 
maintain.  Analysts  say  Sun  in 
particular  will  target  IBM’s  main¬ 
frame  business. 

“Sun  wanted  to  target  some  of 
these  IBM  mainframe  sites  that 
are  looking  at  how  they  might 
move  forward,”  says  Jean  Boz- 
man,  a  research  director  with 
lDC.“This  machine  can  take  on 
a  lot  of  the  roles  traditionally 
handled  by  IBM  mainframes.” 

For  its  part,  IBM  says  main¬ 
frame  sales  continue  to  grow 
and  that  its  zSeries  boxes  can 
more  than  handle  any  high-end 
Unix  applications. 

As  for  the  new  servers,  IBM  de¬ 
clined  to  comment  on  Regatta, 
but  published  reports  say  it  will 
feature  up  to  32  of  the  com¬ 
pany's  Fbwer  4  processors  and 
See  Servers,  page  72 


Web  services 

continued  from  page  1 

(SOAP),  managing  the  whole 
process  could  prove  to  be  more 
trouble  than  it’s  worth.  That’s 
where  companies  such  as  Fla¬ 
menco  and  newcomer  Grand 
Central  Networks,  which  made 
its  debut  in  June,  come  in. 

“This  is  [electronic  data  inter¬ 
change]  on  steroids,” says  Gartner 
analyst  Daiy'l  Plummer,  referring 
to  the  technology  that  dominated 
online  business-to-business  com¬ 
munications  before  the  Web 
emerged. 

Don’t  think  of  Web  service 
companies  such  as  Flamenco 
and  Grand  Central  as  updated 
versions  of  the  old  value-added 
networks  on  which  EDI  users 
relied.  Those  older  networks 
didn’t  work  over  a  public  net¬ 
work  such  as  the  Internet  and 
also  didn’t  manage  business  re¬ 
lationships  to  the  extent  that 
these  new  networks  do,  Plum¬ 
mer  says. 

He  says  it  would  be  “a  real 
killer”  if  the  new  networks 
turned  out  to  be  closed  commu¬ 
nities,  like  so  many  value-added 
networks,  where  “you  can  only 
access  Web  services  if  you’re 
part  of  the  ‘right’  network.” 

Flamenco,  led  by  Bell  Labs  vet¬ 
eran  David  Spicer  and  a  crew  of 
application  vendor  alumni,  has 
designed  a  network  service  that 
relies  on  a  centralized  site  for 
handling  management  chores, 
such  as  billing  and  security  and 
peer-to-peer  technology  for  sup¬ 
porting  communication  between 
applications.  Beaten  to  its  first 
choice  for  a  company  name  — 
Tango  —  executives  instead 
chose  the  name  Flamenco  be- 
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■  THIS  WEEK’S  QUESTION: 

What's  the  name  of  the 
company  formed  by  the 
merger  of  wireless 
companies  BreezeCom 
and  Floware? 

Answer  this  and  nine  addtional  questions 
online  and  you  ootid  win  S500!  Visit 
Nvtwirk  llllirM  Fisitw  and  enter  2349 
in  the  Search  t|ox. 

www.fiwfusion.Goin 


cause  it’s  a  coordinated  dance 
that  relies  on  parties  working 
together.  The  company  has 
nabbed  between  $5  million  and 
$10  million  in  financing  from 
Noro-Mosely  Partners  and  Cor¬ 
dova  Ventures. 

To  use  Flamenco’s  services, 
companies  register  at  Flamenco’s 
Web  site,  which  relies  on  a  cen¬ 
tralized  management  system  at  a 
data  center  in  Atlanta  that’s  con¬ 
nected  to  the  Internet  (or  to  pri¬ 
vate  networks  if  the  customer 
prefers).  Users  specify  which 
companies  will  access  their  Web 
services  and  under  which  rules. 

For  example,  a  retailer  looking 
to  streamline  its  buying  process 
could  tie  its  purchasing  system 
into  Flamenco’s  network  and 
give  distributors  and  suppliers 
access  to  its  Web  services.  The 
retailer  could  define  rules  for 
buying  merchandise  based  on 
price,  day  or  quantities,  and  then 
let  its  applications  interact  auto¬ 
matically  with  those  of  its  busi¬ 
ness  partners. 

Each  site  accessing  Web  ser¬ 
vices  must  first  download  proxy 
software  that  runs  on  a  Web 
server  and  gathers  information 
about  the  Web  services  traffic 
that’s  sent  to  and  from  that  site. 
It’s  also  used  in  the  distribution 
and  verification  of  X.509  digital 
certificates,  which  are  used  to 
secure  transactions. 

Flamenco  acts  as  its  own  digi¬ 
tal  certificate  authority,  which 
lets  the  service  provider  issue, 
authenticate  and  revoke  certifi¬ 
cates.  The  only  other  require¬ 
ment  is  that  the  applications  are 
SOAP-enabled. 

While  Gartner’s  Plummer  points 


out  that  most  companies  have  not 
begun  to  exploit  Web  services, 
many  already  use  software  that 
has  been  upgraded  to  support  it. 
Gartner  estimates  that  the  indus¬ 
try  will  spend  $4.1  billion  on 
products  that  support  Web  ser¬ 
vices  this  year.  Flamenco  charges 
for  its  service  based  on  the  num¬ 
ber  of  connections  to  its  network. 
A  company  that  signs  up  for  100 
connections  would  pay  about 
$4,000  to  $4,500  per  month.  Fla¬ 
menco  also  charges  a  one-time 
set-up  fee  of  $100,000. 

Grand  vision 

Grand  Central’s  aim  is  similar  to 
that  of  Flamenco’s,  although  the 
companies’  services  are  offered 
in  a  different  way 

Grand  Central,  which  has 
secured  $10.5  million  in  funding, 
has  set  up  eight  points  of  pres¬ 
ence  (POP)  on  the  Internet  that 
house  management  servers  and 
interconnect  with  a  Grand  Cen¬ 
tral  hub  where  all  customer  in¬ 
formation  is  stored.  Customers’ 
SOAP  requests  for  a  Web  service 
connection  first  hit  a  Grand 
Central  POP  which  verifies  each 
user’s  request  and  matches  it 
against  previously  established 
rules. 

The  POPs  update  the  central 
management  hub  with  informa¬ 
tion  about  traffic  delivery  and 
usage.  Users  can  access  this  cen¬ 
tral  management  site  via  the 
Internet  to  check  on  data  deliv¬ 
ery  and  status  of  requests  be¬ 
tween  Web  services.  Unlike  Fla¬ 
menco,  Grand  Central  does  not 
require  customers  to  run  proxy 
software  on  their  sites. 

Grand  Central’s  service  works 


with  applications  that  support 
SOAP  or  the  Web  Service  De¬ 
scription  Language,  but  also  pro¬ 
vides  a  gateway  for  older  appli¬ 
cations  that  may  not  have  been 
upgraded. 

Gartner’s  Plummer  says  it’s  not 
clear  whether  Grand  Central’s  or 
Flamenco’s  approach  is  better. 
Some  users  will  prefer  peer-to- 
peer  connections  such  as  Fla¬ 
menco’s,  but  others  won’t  want 
to  deal  with  installing  the  addi¬ 
tional  software  required  to  sup¬ 
port  that  method. 

Putnam  Lovell  Securities  has 
worked  with  Grand  Central  for 
the  past  six  months  to  integrate 
its  customer  relationship  man¬ 
agement  application  from 
Salesforce.com  with  Blue  ma¬ 
trix,  an  application  that  man¬ 
ages  the  content,  creation  and 
workflow  of  research.  Blue- 
matrix  supports  SOAR  but  Sales- 
force.com  does  not,  says  Rodric 
O’Connor,  vice  president  of 
technology  at  Putnam. 

“Grand  Central  allows  us  to 
build  connectors  to  do  a  screen 
scraping  that  gathers  data  from 
Salesforce.com  through  an  XML 
API.  Before  we  had  to  do  a  man¬ 
ual  export  from  Salesforce.com, 
manipulate  that  data  into  an 
Excel  file  and  download  that 
content  to  Bluematrix.  It  was  very 
time-consuming,”  he  says. 

The  managed  Web  services 
setup  lets  Putnam  easily  and 
quickly  distribute  research  to 
clients,  O’Connor  says.  The  com¬ 
pany  is  also  talking  with  other  ap¬ 
plication  service  providers  (ASP) 
it  uses  to  link  their  separate  sys¬ 
tems  via  Web  services. 

Grand  Central’s  service  costs 
$2,500  per  month  for  five  con¬ 
nections  and' $5,000  per  month  i 
for  25  connections.  There  is  no  ^ 
upfront  set-up  fee.  ^ 

Although  Ramenco  and  Grand  j 
Central  are  the  first  service 
providers  with  focused  Web  ser¬ 
vices  networks  today,  the  market 
is  expected  to  get  crowded 
quickly,  Plummer  says.  Expect  to 
see  ASPs  and  other  service 
providers  claiming  they  offer  sim¬ 
ilar  services.  Management  and 
application  integration  software 
vendors  such  as  Hewlett-Packard 
and  IBM  could  even  get  into  the 
act,  he  says. 

Flamenco:  www.flamenconet 
works.com;  Grand  Central:  www. 
grandcentralnetworks.com 
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improving  our  position  in  the  market’”says 
Barbara  Gomolski,  a  research  director  at 
Gartner.  “They  have  the  same  amount  of 
budget,  but  they  don’t  seem  to  have  the 
level  of  discretion  in  terms  of  what  they  do 
with  it.” 

But  those  budgets  may  be  shrinking.  Last 
month’s  terrorist  attacks  have  prompted  re¬ 
search  firms  to  cut  their  estimates  of  IT 
spending  even  further.  A  Gartner  study  re¬ 
leased  in  July  found  that  more  than  half  of 
the  companies  surveyed  plan  to  increase 
IT  spending  an  average  of  10%  this  year.  In 
the  wake  of  the  attacks,  Gomolski  suspects 
that  growth  may  drop  to  around  5%. 

But  the  biggest  effects  will  be 
seen  in  2002,  when  Gartner 
predicts  a  5%  IT  spending  in¬ 
crease  as  a  best-case  scenario 
and  a  3%  drop  as  a  worst  case. 

Companies  in  the  hardest-hit 
sectors,  such  as  the  travel  and 
insurance  industries, could  cut 
IT  spending  by  10%  or  more, 

Gomolski  says. 

Other  research  firms  paint  an 
equally  dim  picture.  Merrill 
Lynch  predicts  that  IT  spend¬ 
ing  will  grow  only  5%  in  the 
U.S.  this  year,  below  the  9%  growth  it  initial¬ 
ly  forecast  in  January  A  Merrill  Lynch  note 
issued  Sept.  19  said  it  was  too  soon  to 
gauge  CIO  reaction  to  the  terrorist  attacks. 

“Certainly  the  [terrorist  attacks]  have  halt¬ 
ed  a  number  of  noncritical  projects,”  says 
Jeff  Wenger,  CTO  at  Tax  Technologies,  a  tax 
software  firm  in  Haworth,  N.J.“However,  we 
remain  optimistic  that  this  will  be  a  short¬ 
term  impact  and  anticipate  minimal  im¬ 
pact  on  our  long-term  strategy  for  growth.” 

At  Teen.com,  Rekos  has  already  done 
more  with  less, after  layoffs  in  January  and 
June  that  closed  two  business  units,  cut 
200  employees  and  trimmed  his  IT  staff. 

And  Mark  Hoffman,  application  systems 
architect  at  Tufts  Health  Plan,  says  he  is 


managing  his  firm's  transition  into  ebusi¬ 
ness  “with  a  flat  or  reduced  budget.” 

Even  where  network  budgets  haven’t 
been  affected,  spending  habits  are  chang¬ 
ing.  Staples,  for  instance,  is  looking  for  bet¬ 
ter  deals.  “We  are  doing  better  in  various 
deals  with  our  vendors  or  partners  than  we 
would  have  anticipated,”  says  Max  Ward, 
Staples’ vice  president  of  technology.  “Tech¬ 
nology  vendors  feeling  the  squeeze  of  the 
economy  and  the  squeeze  from  the  com¬ 
petition  has  definitely  benefited  us.” 

Tax  Technologies,  which  buys  most  of  its 
hardware  from  Dell,  has  saved  about  15% 
on  servers  and  equipment,  and  the  com¬ 
pany  takes  its  time  to  get  the  best  price, 
Wenger  says. 

“We  tend  to  hold  out  for  a  deal  a  little  bit 


more  now  than  we  may  have  in  the  past,” 
he  says.  “It  may  take  four  to  six  weeks  to 
pull  the  trigger  on  a  sale  if  it’s  a  noncritical 
piece  of  equipment,  just  so  we  can  get  the 
best  deal.”  Previously,  the  company  would 
have  placed  orders  almost  immediately 
after  identifying  a  need. 

Because  of  recent  budget  constraints 
brought  on  by  both  the  economy  and 
changes  in  federal  Medicaid  funding,  Jim 
Olson,  CIO  of  Waterbury  Hospital  in  Con¬ 
necticut,  is  holding  off  on  some  projects. 

Olson  won’t  be  upgrading  his  Cisco 
switches  from  Layer  2  to  Layer  3  this  year, 
saying  the  financial  return  on  such  an 
upgrade  would  not  be  felt  for  a  few  years. 
“We  might  have  done  that  in  the  past,  given 


the  money  we  usually  had,  just  to  make 
sure  our  infrastructure  is  staying  a  little  bit 
ahead  of  demand.” 

Instead,  Olson  says  he  is  looking  into  a 
computerized,  document 
management  system.  The 
return  on  the  project  will  be 
more  immediate,  he  says, 
because  the  system  would 
save  the  hospital  “a  few  hundred  thou¬ 
sand  dollars  a  year”  on  its  medical  forms 
budget,  which  runs  around  $1  million 
annually. 

Doing  more  with  less 

Other  firms  are  looking  for  innovative 
ways  to  get  a  bigger  bang  for  their  network 
bucks.  At  Teen.com,  Rekos  is  using  existing 
hardware  in  new  ways  and 
buying  from  vendors  that 
sell  used  and  remanufact¬ 
ured  equipment. 

Rekos  uses  a  load-balanc¬ 
ing  switch  among  a  cluster 
of  older  servers  to  get  the 
performance  he  needs.  “We 
can  get  the  same  kind  of 
horsepower  that  we  would 
with  a  new  server,”  he  says. 

David  Rich,  global  manag¬ 
ing  partner  at  Accenture, 
says  network  executives 
can  also  look  at  automated  management 
software  to  do  more  with  current  network 
staff  and  infrastructure. 

Some  companies  have  made  staff  cuts, 
“but  now  it’s  time  to  re-engineer  the  work 
out  of  the  business,”  Rich  says.“That  means 
getting  more  done  with  fewer  people,  and 
that  usually  means  having  to  do  process 
automation.” 

Paul  Edmunds,  senior  network  analyst 
with  Duke  Energy  in  North  Carolina,  says 
network  management  tools  are  invaluable, 
especially  in  tough  economic  times.  Duke 
Energy  has  used  Hewlett-Packard’s  Open- 
View  network  management  software  since 
the  early  1990s,  and  cost  savings  were  a  big 
reason  for  installing  it,  he  says. 

“We  can  do  a  lot  of  remote  trouble¬ 
shooting  and  remote  problem-solving 
without  having  to  dispatch  a  technician. 
That’s  a  pretty  big  savings,”  he  says.  Ed¬ 
munds  wouldn’t  estimate  cost  savings, 
but  says  he  would  “absolutely”  install  net¬ 
work  management  software  now,  if  it 
weren’t  already  in  place,  to  help  his  net¬ 
work  run  better  in  today’s  economy. 

Outsourcing 

Another  way  network  executives  are 
looking  to  trim  costs  is  through  out¬ 
sourcing.  Hoffman  is  in  the  process  of 
determining  what  to  outsource.  He  has 
outsourced  the  Tufts  Health  Plan  home 
page  since  the  beginning  of  the  year.  He 
saves  an  estimated  $450,000  in  initial 
outlay  and  operations  costs,  and  plans 
to  outsource  more. 

Rekos,  on  the  other  hand,  is  contract¬ 
ing  for  specific  resources,  such  as  pro¬ 
grammers,  rather  than  handing  off 
entire  projects.  He  wouldn’t  estimate 


how  much  this  type  of  outsourcing  saves 
him,  except  to  say  the  savings  are  signifi¬ 
cant  because  he  doesn’t  have  to  hire  peo¬ 
ple  and  pay  benefits. 

Return  on  investment  is 
what  all  network  managers 
should  focus  on,  Gartner’s 
Gomolski  says.  She  says  they 
should  actually  expect  slow¬ 
er  growth  in  their  budgets  and  may  find 
those  budgets  pulled  out  of  their  hands 
and  placed  under  the  direct  discretion  of 
the  CFO. 

“Regardless  of  how  well  they  make  their 
case  —  many  IS  managers  will  have  a  diffi¬ 
cult  time  getting  funds  for  projects  that 
don’t  offer  immediate  payback  through  the 
first  quarter  of  2002.” 

Next  week:  the  impact  on  industry 
innovation.  ■ 
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be  lost  or  left  tied  to  a  cord  next  to  the 
user’s  computer.“These  tokens  aren’t  cheap 
to  replace. They  can  be  anywhere  from  $50 
to  $100,”  he  says. 

He  says  that’s  one  reason  he’s  interested 
in  using  the  new  SafeWord  virtual  smart 
card  technology  By  installing  the  virtual 
smart  card  software  onto  the  laptop  or  PC, 
each  time  the  user  seeks  to  access  the  net¬ 
work,  the  device  will  authenticate  itself 
against  the  SafeWord  authentication  server 
by  generating  a  one-time  password. 

Prue  says  users  at  Fanton  will  benefit 
from  “double-authenticating”  through  the 
virtual  smart  card’s  password  on  their  PCs 
and  the  one-time  password  and  the  one¬ 
time  password  they’ve  memorized. 

Secure  Computing,  which  competes  in 
authentication  against  RSA  Security,  IBM, 
Computer  Associates  and  Netegrity  among 
others,  notes  that  SafeWord  PremierAccess 
can  be  used  to  establish  a  single  sign-on 
capability  within  an  organization. 

This  is  done  by  installing  SafeWord  single¬ 
sign-on  software  agents  onto  any  type  of 
Web  server  and  Windows  or  Unix  mach¬ 
ines  where  access  to  many  resources  is 
needed.  Access  control  is  handled  by  en¬ 
crypted  cookies  on  each  server  that  broker 
authorized  access  at  each  server  after  the 
user  has  authenticated  one  time. 

SafeWord  PremierAccess  has  been  tested 
to  work  with  several  types  of  VPNs,  includ¬ 
ing  those  from  Alcatel  and  Check  Paint. 

A  SafeWord  policy  management  console 
lets  managers  keep  track  of  users’  authenti¬ 
cation  credentials  and  establishes  role- 
based  access  based  on  job  title,  for  exam¬ 
ple,  for  the  purpose  of  granting  specific 
resource  access  privileges,  Leichter  says. 

SafeWord  PremierAccess  is  based  on  per¬ 
user  pricing  according  to  authentication 
method  and  volumes  purchased.  For  exam¬ 
ple,  100  users  would  run  between  $25  to 
$100  each,  while  5,000  users  would  range 
from  $7  to  $24  per  head. 

Secure  Computing:  www.securecomput 
ing.com 


Shifted  priorities 


In  a  recent  survey,  Gartner  found  that  companies  are  spending  much 
less  of  their  budgets  this  year  on  their  own  IT  employees,  and  more  on 
outsourcers  and  consultants.  A  bigger  portion  is  aiso  going  toward 
software  and  hardware,  refiecting  an  emphasis  on  improved  toois  and 
infrastructure  at  the  expense  of  IT  staff. 


IT  budget  distribution  by  resource  category 
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Stackable  Hubs 

O  31.0  Cables, Connectors,  Baiuns 
D  32.0  WiringiFiber  Systems 
D  33.  D  Net  Management  Systems 
O  34.  D  Voice  Over  IP  (VoIP)  Tools 
O  35. 0  Network  Analyzers 
O  36. 0  Other  Local-Area  Network/ 
Internetworking 


D  37.0  Wireless  LANS 
D  38.  D  Wireless/Cell  Phones 


WAN  EQUIPMENT  - 
A  B 


A  B  A  B 

O  39.0  Wirele.ss  LAN  Extension  Tools  O  41.0  PDAs 
O  40. 0  Mobile  Data  O  42. 0  Other  Remote/Wireless 

Equipment/Services 


O  43.  □  Frame  Relay  Equipment 
O  44.0  Bandwidth  Managers 
O  45.0  Bandwidth  Shaping/QOS 
Tools 

D  46.0  VPN  Equipment 
D  47. 0  ATM  Switches 

CARRIER  SERVICES _ 

A  B 

O  59.  D  Internet  Access 
D  60. 0  Private  Lines 
D  61.0  Frame  Relay  Services 
O  62. 0  ADSl/DSL 
D  63.0  T-l/T-S  Services 


O  48. 0  Voice/Video  over  IP 
Gateways 
D  49.0  Modems 
D  50.  D  Cable  Modems 
□  51.  D  xDSL  Products 
D  52.  D  Diagnostic/Test  Equipment 


O  53.0  DSUs/CSUs 
O  54.0  PBXs 
D  55. 0  Call  Center  Tools 
D  56. 0  Videoconferencing  Gear 
D  57.  D  ISDN  Equipment/Services 
D  58.0  Other  WAN 

Equipment/Services 


O  64.  D  ATM  Services 
D  65.  D  Managed  Services 
D  66.  D  VPN  Services 
D  67.  □  LAN-Extension  Services 
D  68.0  OC-3/OC-12 


□  69. 0  Wavelength  Services 
D  70.  D  Dark  Fiber 
O  71.0  Other  Carrier  Services 

A  B 

None  of  the  above  (1 -71)  0  72.0 


Please  indicate  the  Systems/Peripherals/Software/Applications/Business  Services 
that  you  are  currently  involved  in  purchasing  or  plan  to  purchase:  (check  all  that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


SYSTEMS/PERIPHERALS  - 

A  B 

O  01.  D  Laptops/Notebooks 
D  02.  D  Desktops 
D  03.  D  Intel-Based  Servers 
O  04.  □  Rise-Based  Servers 
O  05.  D  Print  Servers 

SOPTWARE/APPLICATIONS  _ 

A  B 

0  14.0  Desktop/Server  Operating 
Systems 

D  15.  D  Network  Management 
□  16.0  Systems  Management 
D  17.0  Directory  Services 
O  18.0  E-Mail 
O  19.  □  Groupware 


BUSINESS  SERVICES - 
A  B 


O  06. 0  Fax  Servers 
D  07.  D  Remote  Access  Servers 
D  08.  D  Video  Servers 
D  09.  D  Mid-Range  Systems 

(including  workstations) 


D  10.  D  Mainframes 
D  11. 0  Printers 

□  12. 0  Enclosures/Racks/Fumiture 
D  13. 0  Other  Computers/ 
Peripherals 


□  20.  D  Database  Management 
Systems 

O  21.0  Customer  Resource 
Management  (CRM) 

O  22.0  Enterprise  Resource 
Planning  (ERP) 

0  23.0  XML  Tools 
O  24.0  Desktop  Videoconferencing 


O  25.0  Middleware 
O  26.0  Document  Management  Tools 
O  27.0  Site  Metering  Tools 
O  28.0  Software  Distribution  Tools 
D  29. 0  Data  Warehousing 
D  30.  D  Applications  Development 
Tools 

D  31.0  Other  Soflware/Applications 


D  32.  D  Application  Service 
Provider  Services 


A  B 

D  35.  D  Other  Services 


D  33.  D  Systems  Integration/ 

Consulting  A  B 

D  34.  D  Education/Training  Services  I'loue  of  the  above  (1  -  35)  0  36.  D 


Please  indicate  the  platforms  that  are  currently  installed/planned:  (check  all  that  apply) 

A.  Currently  installed  B.  Planned  for  purchase 


NETWORK  PROTOCOLS - 

A  B 

0  01.0  TCP/IP  v4 
0  02.0  TCP/IP  v6 

UN/WAN  ENVIRONMENT - 

A  B 

O  08.  D  Gigabit  Ethernet 
O  09. 0  Switched  Ethernet 
O  10.  D  Fast  Ethernet 
O  11.0  Ethernet 
O  12.  D  ATM 

DESKTOP/SERVER  OPERATING  SYSTEMS 
A  B 

□  23.  □  Windows  2000 
O  24. 0  Windows  95/98 
0  25. 0  Windows  NT/Windows  2000 
O  26. 0  Novell  (NetWare  5.X  4.X, 
3J(,2.)0 
0  27.0UNUX 


D  03.0  SNA/APPC/APPN/LU6.2 
D  04.  D  Novell  IPX^PX 


O  05. 0  NETBIOS/NETBUEl 
O  06.  D  NFS 

O  07.  D  Other  Network  Protocols 


A  B 

O  13. 0  Token  Ring/Token  Ring 
Switching 

O  14.0  Layer  3-7  Switching 
O  15.0  FDDI 
D  16.0  Fibre  Channel 
O  17.0  Wireless  LANs 


O  18. 0  DSL 
D  19. 0  ISDN 
D  20. 0  Frame  Relay 
O  21. 0  Private  Line  Tl,  T3,  OC-3, 
OC-12 

O  22. 0  Other  LAN/WAN 
Environment 


□  28. 0  Intel  based  UNIX 
D  29. 0  RISC  based  UNIX 
(incl.  SOLARIS) 

O  30. 0  IBM  MVSA'MA'SErtiSA 
0  31.0  0S/400 
0  32.0  Digital  VMS 
O  33.0  Macintosh 


O  34. 0  Palm  OS 
O  35. 0  Windows  CE 
O  36. 0  Other  Network  Operating 
System 

A  B 

None  of  the  above  (1-  36)  O  37.  O 


Continued  on  next  page... 


Continued  from  page  one... 


5. 

What  is  the  total  number  of  Servers/Clients  instalfed/planned  at  your  location/in  your 
entire  organization?  (check  one  box  in  each  column) 

.  .  SERYERS 

At  Loatiofl 

Entire  0r|. 

At  Location 

CUEHTS  ^  ^  1 

Entnc  Org.  1 

A 

□  1.  50,0004 

1 

□ 

c 

□ 

1. 

50,000+ 

0 

□ 

□  2.  10,000  to  49,999  □ 

□ 

2. 

10,000  to  49,999 

□ 

□  3.  1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

0  4.  100to999 

□ 

□ 

4. 

100  to  999 

□ 

□  5.  50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□  6.  10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□  7.  lto9 

□ 

□ 

7. 

lto9 

□ 

□  8.  none 

□ 

□ 

8. 

none 

□ 

What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products 
and  services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE/ENTERPRISE; 

!,□  Entire  Enterprise/  3.0  Division/Multiple 

Multiple  Enterprises  Divisions 

B.  Involvement  (diedc  ALL  that  apply) 

!.□  Create  Network/IT  4.n  Evaluate 

Strategy  Products/Services 

2,n  Recommend/Specify  5.0  Determine  the  Need 

Brand  O.D  None 

3,0  Approve  Purchase 

2.D  Multinational  4.D  Department 

Enterprise  5,0  None 

For  faster  service,  subscribe  online  at: 

http://www.nwwsubscnbe.eom/b  1 00 1 


Q 

What  is  the  estimated  number  of  employees  in  your  entire  organization/at  your 
location?  Ictwck  one  in  each  section) 

A.  Entire  organiiation; 

1.  □  Over  20,000  5.  □  1,000  -  2,499 

2,  □  10,000-19,999  6.  □  500-999 

3,  □  5,000  -  9,999  7.  □  499orless 

4.  n  2500  -  4,999 

B.  At  your  locatioii; 

1.  □  Over20.l)t)0  6.  □  500  -  999 

2.  □  10,000-19,999  7.  □  250  -  499 

3.  □  5,000  -  9,999  8.  □  100  -  249 

4.  □  2500-4,999  9.  □  99orless 

5.  □  1,000  -  2,499 

II. 

Which  of  the  following  hardware  platforms  are  installed/pianned  in  your  company? 

(check  ALL  that  apply)  , 

A  -  Servers  B  •  Workstations/Desktops/Laptops 

1.  □  IBM  (Mainframes)  5.  □  Unisys  j  q  Syp  Microsystems  5.  □  OeW 

2.  □  IBMRS/6000  6-  g  H-P  2.  □  H-P  6,  □  Gateway 

3.  □  IBM  AS/400  7.  □  Other  3  q  CompaqDigital  7,  □  Fujitsu 

4.  □  Compaq/Digital/  4.  □  IBM  8.  □  Other 

Tandem 

12. 

What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 

1.  □  $20  Billion  or  More  5,  □  {100  Million  to  $499.9  Million  9.D  $4.9  Million  or  Less 

2.  □  $10  Billion  to  $19.9  Billion  6.  □  $50  Million  to  $99.9  Million  I0£l  None  of  the  above 

3.  □  $1  Billion  to  $9.9  Billion  7.  □  $10  Million  to  $49.9  Million 

4.  □  $500  Million  to  $999.9  Million  8.  □  $3  Million  to  $9.9  Million 

1 

13. 

For  which  areas  outside  of  the  U.S.A.  do  you  have  purchase  influence? 

(check  ALL  that  apply) 

D 

.  □  Europe  3.  □  South  America  5.  □  Middle  East  7.  □  Canada 

,  □  Asia  4,  □  Australia  6.  □  Africa  8.  D  None 

Sign  Up  and  Start  Immediately  Receiving  our 
FREE  Weekly  e-Newsletter  This  Week  on  NWFusion 
and  easily  stay  current  on  today’s  networking  challenges! 


□YES!  start  my  subscription 


immediately.  My  e-mail 


address  is; 


Your  colleagues  may  also  qualify  for  a  FREE  subscription! 

Please  list  below  names  and  job  functions  of  other  individuals  at  your  location  who  might  also  benefit  from  a  FREE  subscription  to  |\|0ty\/O|'|(yyorllj 

NAME _  JOB  FUNQION _  E-MAIL  ADDRESS _ 
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UNITED  STATES 


BUSINESS  REPLY  MAIL 

FIRST  CLASS  MAIL  PERMIT  NO  1752  NORTHBROOK  IL 

POSTAGE  WILL  BE  PAID  BY  ADDRESSEE 


PO  BOX  3091 

NORTHBROOK  IL  60065-9928 


'  "  "  "  II...I.I.I.I..I.I.M  . . 


I 


I  I  I  I  I  I  I  I 


I 


1  www.nwfusion.com 

10/1/01 

NeiworkWof'id  EQ 

■  TCP/IP,  LAN/WAN  SWITCHES 

■  ROUTERS  ■  HUBS 

■  ACCESS  DEVICES  ■  CLIENTS 

■  SERVERS  ■  OPERATING  SYSTEMS 

■  VPNS  ■  NETWORKED  STORAGE 


Peribit  takes  a  bite  out  of  WAN  traffic 


■  BY  JOHN  DIX 

Borrowing  from  pattern  recognition 
technology  developed  in  DNA  sequence 
research, start-up  Peribit  says  its  new  com¬ 
pression  technique  can  reduce  traffic 
across  WAN  links  by  up  to  90%  by  swap¬ 
ping  labels  for  redundant  blocks  of  IP 
data. 

The  company’s  SR-50  compression 
appliance,  which  was  launched  recently 
at  NetWorld-i-lnterop  2001  in  Atlanta,  has 
two  10/100  Ethernet  ports  and  is  installed 
on  a  LAN  behind  a  router.  Once  activated, 
the  transparent,  wirespeed  device  scans 
for  other  SR-50s  and  then  begins  identify¬ 
ing  redundant  blocks  of  data  that  can  be 
stripped  out  of  the  WAN  path. 

Pattern  recognition  is  done  using  Peribit’s 
patent-pending  Molecular  Sequence  Re¬ 
duction  technology  Essentially,  the  box 
goes  “through  a  learning  process  and 
builds  a  table  of  repeated  patterns  that  is 
continuously  and  dynamically  updated  as 
new  patterns  are  learned  and  old  patterns 
that  don’t  recur  frequently  are  forgotten,” 


Mora  for  loss  Peribit  says  pattern  recognition  techniques  developed  for  DNA  research  let  it 

^  reduce  data  transmitted  over  WAN  links  by  70%. 


The  SR-50  looks  for  large  blocks  of  repetitive  data  —  such  as 
application  components  —  that  can  be  replaced  with  labels. 
Real  data  is  swapped  in  by  remote  SR-50s.  The  company  says 
the  product  can  increase  WAN  link  capacity  by  four  to  10  times. 


E 


frwwnnn-f^  I  | 
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SR-50 


Data  reduction  by  application 
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Megabytes 


the  company  says.  “The  amount  of  histori¬ 
cal  data  stored  can  vary  from  tens  to  hun¬ 
dreds  of  megabytes,  or  more.” 


Once  identified,  the  repetitive  blocks  of 
data  are  replaced  by  labels,  and  the  real 
data  is  swapped  back  in  by  remote  SR-50s, 


says  Amit  Singh,  Fteribit  co-founder  and 
chief  scientist.  Delay  is  said  to  be  limited 

See  Peribit,  page  18 


3Gom  keeps  Gigabit  Ethernet  train  rolling 


■  Remote  Apple  Macintosh  users  can 
now  connect  with  Nortel  VPN  gear 
over  dial-up  Internet  connections. 

Nortel  has  added  a  software  client  for 
Mac  operating  systems  to  its  Contivity 
VPN  equipment,  which  previously  sup¬ 
ported  only  Microsoft  operating  sys¬ 
tems.  Nortel  says  it  will  have  a  VPN 
client  for  Unix  by  year-end  and  has  set 
out  longer-term  goals  of  developing 
clients  for  Linux,  Solaris,  IBM-AIX  and 
HP-UX.  These  software  clients  require 
no  upgrades  to  the  Contivity  VPN  gear 
to  which  the  clients  connect.The  tele¬ 
com  equipment  giant  also  says  that 
next  month  it  will  upgrade  the  software 
on  its  Contivity  equipment  to  support 
the  VPN  client  that  Certicom  makes  for 
handheld  devices.  Called  movianVPN, 
the  software  uses  an  encryption 
method  that  requires  less  processing 
power  than  the  method  typically  used 
with  VPN  clients  for  more  powerful 
PCs.  www.nortel.com 


■  BY  PHIL  HOCHMUTH 

SANTA  CLARA  —  3Com  will  introduce 
several  Gigabit  products  this  week  to  help 
small  to  midsize  companies  bolster  the 
speed  of  their  networks  while  reducing 
network  deployment  and  management 
headaches. 

3Com  has  been  one  of  the  technology 
companies  hit  hardest  by  the  recent 
downturn  in  the  network  hardware  mar¬ 
ket.  A  recent  reports  states  that  the  com¬ 
pany’s  net  losses  increased  300%  in  its  first 
fiscal  quarter,  compared  with  the  same 
quarter  a  year  ago.  Still,  the  company  is 
finding  some  positive  news  in  terms  of 
market  share  in  the  markets  for  copper 
Gigabit  Ethernet  switches.  According  to 
Cahners  ln-Stat,3Com  was  the  top  seller  of 
copper  Gigabit  Ethernet  switch  ports  in 
the  first  quarter,  with  35.7%  of  the  market. 

And  the  firm  is  looking  to  extend  that 
success  by  introducing  its  24-port  Super- 
Stack  3  Switch  4924,  which  has  twice  the 
lOOOBaseT  copper  Gigabit  ports  as  the 
previous  4900  box.  The  Switch  4950  will 
also  be  rolled  out,  which  offers  12  fixed 
lOOOBase-T  ports  and  12  fixed  lOOOBase 
SX  ports  for  Gigabit  Ethernet  over  single¬ 


mode  fiber-optic  wiring.  The  box  also  sup¬ 
ports  six  gigabit  interface  converter 
(GBIC)  slots  which  could  be  filled  with 
additional  lOOOM-bit/sec  single-mode  con¬ 
nections.  Such  connections,  which  can 
reach  up  to  three  miles,  could  be  used  to 
connect  a  4950  to  switches  and  servers 
located  in  other  buildings  on  campus  or  in 
a  metropolitan-area  network. 

Also  on  tap  this  week  from  3Com  is  the 
addition  of  Layer  3  switching  software 
to  its  4900  series  switches.  New  4900 
switches  will  ship  with  the  software  — 
which  includes  Web-based  Layer  3  net¬ 
work  management  and  setup  tools  — 
while  previous  4900  products  can  be 
upgraded  for  free.  Layer  3  software  will 
make  routing  possible  between  4900 
switches  located  across  long  distances 
in  a  WAN  or  campus  network. 

Several  4924  switches  are  slated  for  the 
network  at  Crawfordsville  (Ind.)  Com¬ 
munity  Schools.  The  school  system  will 
use  the  box’s  24  Gigabit  Ethernet  connec¬ 
tions  to  plug  in  21  Citrix-based  Windows 
terminal  servers  over  its  existing  Category 
5  cabling. 

“This  will  let  us  put  our  Citrix  servers  in 
same  building  so  we  don’t  have  to  drive 


across  town  if  servers  need  to  be  fixed  or 
upgraded,”  says  Gene  Howell,  IT  manager 
for  the  school  district.The  servers  are  cur¬ 
rently  located  in  various  buildings 
throughout  the  school  system. 

In  the  new  centralized  data  center, 
4924s  will  use  two  trunked  Gigabit  con¬ 
nections  to  link  to  a  modular  3Com 
Switch  4005,  which  acts  as  the  schools’ 
backbone. 

The  Crawfordsville  school  system  is  in 
the  process  of  eliminating  its  56K  bit/sec 
ISDN  WAN  connections,  which  link  the 
eight  elementary  and  secondary  schools 
together.  The  school  system  will  soon 
have  its  own  dark  fiber  installed  among 
its  buildings  through  an  arrangement 
with  the  local  electric  utility  company 
Switch  4924s  and  4900s  will  aggregate 
traffic  in  the  schools  and  uplink  to  the 
backbone  via  Layer  3,  lOOOBase-LX  GBIC 
connections. 

To  help  set  up  this  Gigabit  Ethernet 
WAN,  Howell  is  also  testing  3Com’s  Layer  3 
software  for  the  4900s  to  route  traffic  over 
the  long-distance  fiber  links.  Howell  says 
the  Web-based  management  and  setup 
software  3Com  offers  for  Layer  3  configu- 

See  3Coni,  page  18 
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Peribit 

■.:.!!tinued  from  page  17 

to  a  millisecond. 

Why  might  Peribit  succeed 
while  other  other  compression 
and  trunk  expansion  techniques 
have  met  with  only  tepid  de¬ 
mand?  Singh  says  the  promise  of 
tripling  WAN  bandwidth  will  help 
customers  overcome  the  resis¬ 
tance  to  introduce  another  box 
in  the  network.  “Older  technolo¬ 
gies  didn’t  promise  as  much  pay¬ 
back,”  Singh  says. 

The  SR-50  can  squeeze  traffic  so 
much  because  of  the  repetitive 
information  in  headers,  attach¬ 
ments  and  applications  that  must 
be  synchronized,  such  as  data¬ 
bases  and  e-mail, Singh  says.As  an 
example,  the  company  says  the 
SR-50  can  typically  reduce  e-mail 
traffic  by  75%,  SQL  by  80%  and 
Lotus  Notes  by  78%  (see  graphic, 
page  17). 

However,  it  won’t  work  on  en¬ 
crypted  links,  so  trunks  support¬ 


ing  secured  links  won’t  see  much 
in  the  way  of  benefit.  Asked  if  the 
box  might  interfere  with  quality 
of  service,  voice  over  IP  or  other 
emerging  technologies,  Singh 
.says  it  can  be  programmed  to  ig¬ 
nore  any  type  of  traffic. 

In  fact,  in  the  event  of  a  power, 
hardware  or  software  failure,  it 
takes  itself  out  of  the  loop  and 
lets  all  traffic  through. 

To  see  how  boxes  are  perform¬ 
ing,  customers  can 
use  a  browser  to  get 
real-time  feedback  or 
a  historical  glance  at 
performance,  in 
terms  of  total  reduc¬ 
tion  in  WAN  traffic  or 
by  application. 

That  reporting  fea¬ 
ture  amounts  to  a 
self-selling  feature. 

Customers  can  bring 
in  one  device,  set  it 
up  in  profile  mode 
to  watch  traffic  on  a 
link,  and  then  have  it 


generate  reports  about  how 
much  it  could  have  compressed. 

Depending  on  the  line’s  ex¬ 
pense,  the  typical  return  on  invest¬ 
ment  time  frame  is  three  to  six 
months,  Singh  says. 

An  ancillary  benefit:  Reducing 
outbound  traffic  takes  some 
burden  off  routers  and  could  let 
you  put  off  router  upgrades. 
Singh  says  he  has  seen  router 
CPU  utilization  drop  from  70% 
to  30%  in  some 
instances. 

The  SR-50  is  ship¬ 
ping  now  and  costs 
$20,000  for  a  box 
that  supports  WAN 
speeds  up  to  E-l,the 
2M-bit/sec  Euro¬ 
pean  equivalent  of  T- 
l.The  box  scales  up 
to  501VI  bit/sec  forT-3 
links,  a  configura¬ 
tion  that  costs  about 
$100,000. 

Peribit:  www.peri 
bit.com 


More  online! 


Read  more  about  Peribit's 
Molecular  Sequence 
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ration  is  nice,  but  he  prefers  to 
use  the  command-line  interface 
for  certain  configurations. 

In  addition  to  the  new 
switches  and  software,  3Com  is 
releasing  a  dual-port  lOOOBase-T 
module  for  its  chassis-based 
Switch  4005  and  single-port  cop¬ 
per  GBlCs  for  the  Switch  4007, 
3Com’s  higher-density  chassis  for 
midsize  networks. The  lOOOBase- 
T  module  could  be  used  for 
hooking  a  server  aggregation 
switch,  such  as  the  4900  or  4924, 
with  a  Switch  4005  in  the  back¬ 
bone,  while  the  copper  GBIC 
could  be  used  for  the  same  func¬ 
tion  with  the  Switch  4007. 

Few  competitors  match 
3Com’s  price  per  port  or  copper 
Gigabit  Ethernet  port  density  in 
a  stackable  product.  Similar 
products  include  the  Cisco  3550- 
12T,  a  10-port  Copper  Gigabit 
switch  with  two  GBIC  uplinks. 


which  sells  for  about  $813  per 
Gigabit  port.  Foundry  Networks’ 
recently  announced  line  of 
Fastlron  11  switches  offer  16-,  24- 
and  32-port  lOOOBase-T  models. 
However,  these  boxes  are  pricier 
than  the  3Com  offerings,  with 
3Com’s  24-port  box  priced  at 
$416  per  port,  vs.  the  24-port 
Fastlron  II,  which  costs  about 
$660  per  Gigabit  port. 

3Com’s  SuperStack  3  Switch 
4924  is  priced  at  $10,000  and  is 
available  this  month.  Also  avail¬ 
able  this  month  is  the  free  Layer 
3  software  upgrade  for  the  4900 
series  and  the  dual-port 
lOOOBase-T  module  for  the  4005. 
costing  $2,000. 

In  November,  the  SuperStack  3 
Switch  4950  will  be  available  for 
$14,000,  and  the  copper  GBIC 
inserts  for  the  Switch  4007  will 
be  available  for  $400.  Both  the 
server  and  desktop  NICs  are 
available  now  for  $170  and  $150, 
respectively. 

3Com:  www.3com.com 
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anywhere  overnight? 


Introducing  the  Canon  imageRUNNER  with  document  distribution  technology.  Now  you  can  send 
paper  documents  anywhere,  in  any  form,  at  anytime,  right  over  your  network  or  the  internet.  Instantaneously.  Simply 
scan  a  document  Into  the  imageRUNNER  5000,  and  you  can  send  It  to  any  desktop,  e-mail  address,  fax  machine,  database 
or  file  server.  And  since  the  Canon  ImageRUNNER  is  capable  of  integrating  directly  with  your  existing  e-mail,  lanfax. 


*  Requires  addilional  software  which  is  sold  separately.  Speak  to  your  authorised  Canon  dealer. 

Canon  is  a  registered  trademark  and  IMAGERUNNER  and  Canon  Know  How  are  trademarks  of  Canon  Inc.  IMAGEANYWARE  is  a  service  mark  of  Canon  U.S  A.  Inc.  02001  Canon  U.S  A.  Inc. 
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TOLLY  ON 
TECHNOLOGY 

Kevin 

Tolly 


I  admit,  I’m  a  technology-centric  guy. 
Talk  of  “solutions”  has  always  made 
me  uneasy. The  fundamental  premise 
that  a  vendor  can  create  a  “superior  solu¬ 
tion”  out  of  demonstrably  inferior  com¬ 
ponent  products  is  suspect.  But  there  are 
signs  pointing,  perhaps,  to  the  sunset  of 
all  this  solutions  talk  and  putting  the 
focus  back  on  technology. 

The  unlikely  source  of  this  ray  of  hope 
is  the  of-late  beleaguered  Cisco.  As  part 
of  its  “sweeping  reorganization”  of  late 
August,  Cisco  eliminated  its  solutions- 
centric  line-of-business  approach.  The 
enterprise,  service  provider  and  com¬ 
mercial  businesses  are  no  more.  Instead 
this  technology  company  has  decided  to 
organize  itself  around  ...  technology. 

Given  the  role  that  Cisco  plays  in  the  net¬ 
worked  world,  this  shift  could  have  a  rip¬ 
ple  effect  throughout  the  industry.  (See 


Are  we  looking  at  the  sunset  for  ‘solution? 


www.nwfusion.com,  DocRnder:  6225.) 

The  solutions  approach  was  the  mid- 
’90s  marketing  coup  that  let  larger  ven¬ 
dors  with  a  mixed  bag  of  often  so-so 
technology  prevail  over  the  scrappy 
start-ups  that  focused  on  excellence  in 
one  area.  And  it  played  well  when  those 
struggling  start-ups  were  then  acquired 
and  integrated  into  the  ever-growing 
solutions  companies. 

Even  though  this  solutions  strategy 
was  flawed,  too  few  customers  chal¬ 
lenged  Cisco  on  it.  Consequently,  the 
strategy  evolved  into  a  religion  with 
converts  industrywide. 

Solutions  vendors  would  make  decla¬ 
rations  along  the  lines  of:  “Just  having 
the  best  components  doesn’t  mean 
you’ll  build  the  best  solution.”  1  can’t 
argue  with  that.  But  the  vendors  would 
have  you  believe  that  a  convoluted  con¬ 
verse  of  that  would  be  true  also  —  that 
somehow  having  lackluster  products  in 
the  portfolio  mix  would  somehow  result, 
ultimately,  in  a  superior  solution. 

At  Cisco,  the  solutions  approach  adopt¬ 
ed  by  the  individual  lines  of  business, 
caused  a  fundamental  problem.  Accord¬ 
ing  to  Cisco  executives,  it  had  people 


working  at  cross-purposes  —  reinventing 
the  same  or  an  oh-so-slightly  different 
wheel  at  different  parts  of  Cisco. 

IBM  did  the  same  thing  in  the  ’70s  but 
it  had  little  choice,  faced  with  a  decade- 
long  antitrust  action  that  could  have  re¬ 
sulted  in  an  IBM  breakup. 


II  We  can  only  hope  that 
Cisco’s  back-to-basics  focus 
on  technology  will  be  the 
harbinger  of  an  industry 
trend. 

We  can  only  hope  that  Cisco’s  back-to- 
basics  focus  on  technology  will  be  the 
harbinger  of  an  industry  trend.  Technol¬ 
ogy,  after  all,  is  what  the  technology  busi¬ 
ness  is  supposed  to  be  about. 

Perhaps  its  experience  competing  with 
Juniper  Networks  had  finally  shown 
Cisco  that  time  had  run  out  on  the  we- 
are-the-world  approach.  According  to 
industry  reports,  this  essentially  single¬ 


product  purveyor  of  high-end  multigiga¬ 
bit  switches  had  in  recent  times  taken 
30%  of  the  high-end  router  market  —  all 
at  Cisco’s  expense. 

I  had  to  chuckle  when  I  read  the  al¬ 
most  off-handed  way  the  reorganization 
came  about.  Cisco  exec  James  Richard¬ 
son  stated,  “There’s  nothing  to  be  read 
into  [the  reorganization]”  It  was  just 
that  one  key  exec,  it  seems,  had  decided 
to  leave.  This  triggered  Chambers  to 
look  at  his  exec  team,  and,  according  to 
Richardson,  Chambers  said, “Well,  if  I’m 
going  to  change  to  a  functional  organi¬ 
zation,!  might  as  well  do  it  now.” 

Does  that  mean  that  Cisco  was  a  dys¬ 
functional  organization  before?  It’s  like 
President  Bush  saying:  “Well,  the  Army’s 
chief  of  staff  retired, so  hell,  I  thought  I’d 
just  eliminate  that  whole  ‘service’  thing 
and  just  put  ’em  all  together.” 

What  is  important  is  the  change.  I, 
for  one,  am  looking  forward  to  seeing 
the  industry  focus  once  more  on  core 
technology. 

Tolly  is  chairman  and  CEO  of  The  Tolly 
Group.  He  may  be  reached  at  ktoUy® 
tolly.com. 
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and  document  management  software,  you  can  maximize  your  investment 
in  these  systems*.  The  cost  and  hassle  of  overnight  delivery  are  finally 
over.  At  Canon,  we’re  giving  people  the  know-how  to  make  paper 
documents  work  in  an  internet  world. 
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It’s  the  power  of  Inter-based  servers.  It’s  thousands  of  components  from 
hundreds  of  suppliers,  coming  together  at  the  right  place  at  the  right 
time.  It’s  being  able  to  scale  fast  to  serve  multiple  customers,  suppliers 
and  partners  around  the  world.  It’s  massive  server  performance  without 
massive  hardware  costs.  To  find  out  how  to  optimize  your  supply  chain, 
visit  intel.com/ebusiness. 
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BrightStor  Enterprise  Backup 

What  good  is  storage  software  if  it  isn't  fast  enough  to  back  up  all  of  your  critical  information? 
BrightStor  Enterprise  Backup  sets  a  new  standard  for  high-speed  storage  software,  which  means 
you  don't  have  to  pick  and  choose  what  data  to  protect.  So  if  you're  looking  for  the  best  storage 
solution  for  UNIX,  Windows  NT,  and  Windows  2000,  you  just  found  it. 
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INTRODUCING  THE  FASTEST  STORAGE  SOFTWARE  ON  EARTH. 
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■  INTRANETS  ■  MESSAGING/GROUPWARE 

■  E-COMMERCE  ■  SECURITY  ■  VPNs 

■  NETWORK  MANAGEMENT  ■  DIRECTORIES 
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Lessons  from  Leading  Users 


Shipping  CO.  cuts  appiication  deveiopment  costs 


■  BY  JOHN  FONTANA 

Michel  Langlois  is  writing  another 
chapter  in  his  company’s  legacy 
of  150  years  of  innovation,  and 
he  is  using  network  security  and  access 
management  to  do  the  job. 

The  director  of  enterprise  architecture 
for  APL,  one  of  the  world’s  oldest  ocean 
shipping  companies,  is  constructing  an 
access  control  system  that  puts  a  secure 
gate  on  his  network,  controlling  access 
by  developers,  end  users  and  partners. 

For  his  IT  peers,  it  may  be  a  lesson  in 
proving  that  Web-based  access  control 
can  provide  single  sign-on  and  object- 
level  security  for  an  entire  intranet  of 
applications  and  slash  application  de¬ 
velopment  costs. 

“It’s  about  security  and  control,  but 
also  it’s  the  idea  that  each  developer 
does  not  have  to  create  their  own 
authentication  mechanism.  The  key 
here  is  reuse,” Langlois  says.“This  authen¬ 
tication  service  will  make  the  building 
of  applications  simpler,  quicker,  faster 
and  cheaper.” 

The  authentication  control  is  but  one 


Building  better  applications 

APL,  one  of  the  nation’s  oldest  ocean  shipping  companies,  is  constructing 
a  new  enterprise  application  environment  that  promises  to  decrease 
administrative  costs  and  application  development  time. 
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API’s  applications 
can  incorporate  a 
compilation  of 
standard  services 
and  components. 


Components 

APL  calls  these  “use  cases.” 
The  prebuilt  Enterprise  Java 
Beans  are  miniprograms,  such 
as  a  price  checker,  that  can  be 
reused  in  any  application,  cutting 
application  development  time. 


Foundation  services 

A  set  of  up  to  30  services 
that  any  application  can 
use,  creating  a  similarity 
across  applications, 
eliminating  security  holes 
or  integration  issues. 


of  nearly  30  reusable  platform  services 
that  are  part  of  APL’s  ambitious  project 
to  construct  a  new  enterprise  applica¬ 
tion  platform  —  called  Enterprise 
Environment  —  around  Sun  Solaris 
servers,  Java  and  Java  2  Platform 
Enterprise  Edition.  APL  then  plans  to 
convert  its  20  current  mainframe  appli¬ 
cations,  some  of  which  have  been  in 
service  for  20  years,  to  run  on  the  plat¬ 
form. 

The  result  will  be  a  fault-tolerant  envi¬ 
ronment  and  set  of  application  ser¬ 
vices  that  can  be  extended  throughout 
APL  and  its  shipping  customers.  APL 
hopes  the  system  will  help  it  return 
price  quotes  in  near  real  time,  a 
process  that  takes  up  to  a  day  or  even 
a  week  in  some  cases. 

APL,  which  operates  120  ships  that 
haul  cargo  worldwide,  has  spent  $8 
million  on  hardware  and  software  to 
build  the  Enterprise  Environment.  But 
it  plans  to  save  some  $15  million  to  $20 
million  per  year  on  costs  for  applica¬ 
tion  development,  and  quality  and 
assurance  testing  after  the  system 
See  APL,  page  24 


■  Tawe  Software  last  week  named  Robert  Davis  as  its  president  and  CEO. 
Davis  comes  to  Tawe,  a  network  management  software  maker  in  Research 
Triangle  Park,  N.C.,  with  20  years  industry  experience.  Davis  worked  at  IBM 
subsidiary  Tivoli  Systems  as  vice  president  of  the  service  provider  business 
unit.  He  also  held  positions  at  Lucent  as  vice  president  of  enterprise  sales  and 
director  of  engineering.  Tawe  has  been  without  a  fuil-time  CEO  since  late 
March,  www.tavve.com 

■  Velosel  recently  rolled  out  eChannei  Manager  4.0,  an  upgrade  of  its  software  that 
lets  suppliers  manage  their  electronic  sales  channels,  from  exporting  catalog  con¬ 
tent  to  processing  orders.  EChannei  Manager  now  features  tools  to  generate 
reports,  perform  analysis  and  send  notification  for  such  actions  as  delays  in  fulfill¬ 
ment  or  decreasing  order  volume.  Other  functions  include  automating  the  sell-side 
order  process,  from  placement  to  fulfillment;  analytic  tools  to  understanding  buying 
behavior,  history  and  patterns;  and  the  ability  to  publish  custom  catalogs  specific  to 
each  buyer.  Cost  for  hosting  services  ranges  from  $10,000  to  $50,000  per  monthly 
subscription;  licensing  fees  start  at  $350,000.  www.velosel.com 


Aprisma  expands  Spectrum 

Network  mgmt.  software  will  come  in  three  targeted  versions. 


■  BY  DENISE  DUBIE 

DURHAM,  N.H.  —  In  November, 
Aprisma  will  break  its  flagship  Spectrum 
network  management  package  into 
three  targeted  releases  and  add  features 
that  will  help  customers  track  and  find 
the  cause  of  network  problems  more 
quickly. 

Although  the  company  would  not  dis¬ 
close  specific  product  details,  beta  ver¬ 
sion  users  say  the  package  will  feature 
improved  event  correlation  and  root- 
cause  analysis  capabilities,  as  well  as  the 
ability  to  share  data  with  third-party  appli¬ 
cations  using  Spectrum’s  central  database 
and  management  console.  Spectrum  is 
network  management  software  that  moni¬ 
tors  the  availability  and  performance  of 
networks,  applications  and  systems,  and 


helps  users  detect  potential  outages  or 
network  downtime. 

Aprisma  says  the  next  release  of  Spec¬ 
trum  will  come  in  three  flavors  — 
Spectrum  for  emerging  enterprise,  Spec¬ 
trum  for  global  2000,  and  Spectrum  ser¬ 
vice  provider  —  for  small  firms,  large 
enterprise  companies,  and  service  pro¬ 
viders,  respectively. 

The  company  says  it  developed  the 
separate  versions  to  address  the  specific 
needs  of  different  users.  For  example, 
small  to  midsize  users  will  not  have  to 
purchase  or  implement  the  entire  Spec¬ 
trum  framework,  which  can  be  costly 
with  prices  ranging  from  $25,000  to 
$150,000,  depending  on  the  size  of  the 
network.  The  company  would  only  say 
that  the  service  provider  version  is 
See  Aprisma,  page  24 
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Regular  readers  of  this  column  will 
know  that  I  have  been  worried 
about  the  ease  with  which  govern¬ 
ments  can  erode  expectations  and  reali¬ 
ties  of  individuals’ privacy  on  the  Internet. 
I  have  written  about  these  threats  for 
many  years.  Suddenly  it’s  not  so  easy  to  be 
a  privacy  purist,  but  that  doesn’t  make  it 
any  less  important. 

It  is  widely  said  that  the  first  casualty  of 
war  is  the  truth,  but  the  individual  is  not 


Enterprise  Applications _ 

Tensions  in  a  privacy  purist 


far  behind.  I  don’t  see  any  specific  evi¬ 
dence  of  the  erosion  of  truth,  but  propos¬ 
als  by  the  Bush  administration  and  by 
well-meaning  representatives  and  sena¬ 
tors  are,  at  their  base,  attempts  to  subvert 
individual  rights  in  the  name  of  fighting 
terrorism.  The  people  who  propose  these 
attacks  seem  to  think  individual  rights  are 
inconvenient  in  times  of  national  threat 
—  and  they’re  right. 

It  would  be  one  thing  if  all  of  the  pro¬ 
posals  would  make  thwarting  and  catch¬ 
ing  terrorists  easier,  but  all  too  many  of 
them  are  repackaged  ideas  that  have 
been  rejected  by  Congress  over  many 
years  and  are  entirely  orthogonal  to  the 
terrorist  threat.  Some  are  clearly  logical 
and  should  be  adopted,  such  as  the  idea 
that  it  is  an  individual  that  is  being  wire¬ 


tapped  and  not  just  a  piece  of  hardware. 

Proposals  to  require  “back  doors”  in 
encryption  programs  is  an  example  of 
something  less  logical. The  use  of  back¬ 
door-free  encryption  cannot  actually  be 
prevented,  no  matter  how  much  some¬ 
one  might  want  to  do  so. The  algorithms 
are  too  well-known,  and  there  is  too 
much  existing  software.  Monitoring 
communications  links  to  try  to  catch 
people  would  not  be  effective  because 
anyone  serious  could  encrypt  already 
encrypted  data,  using  an  approved  sys¬ 
tem  for  the  last  encryption. The  authori¬ 
ties  wouldn’t  know  that  this  was  hap¬ 
pening  until  they  got  a  warrant  to  wire¬ 
tap  the  communications,  and  then  the 
only  thing  they  could  do  is  charge  the 
individuals  with  illegal  use  of  encryp¬ 
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tion,  like  charging  A1  Capone  with  tax 
evasion. 

I’m  not  alone  in  my  worries  about  going 
too  far.  Groups  ranging  from  the  National 
Rifle  Association  to  the  American  Civil 
Liberties  Union  have  expressed  concerns. 
We  just  need  to  remember  that  those 
inconvenient  rights  are  what  makes  this 
country  different  from  many  others.  To 
destroy  them  to  save  the  country  would 
be  a  hollow  victory. 

Disclaimer:  Even  within  Harvard  opin¬ 
ion  is  split  on  this  topic;  the  above  is  my 
take. 

Bradner  is  a  consultant  with  Harvard 
University's  University  Information  Sys¬ 
tems.  He  can  be  reached  at  sob@ 
sobco.com. 
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more  scalable  to  manage  larger 
environments. 

Aprisma  follows  competitors 
Computer  Associates  with  Uni¬ 
center  and  Hewlett-Packard  with 
OpenView,  which  this  summer 
separately  announced  modular 
versions  of  their  management 
software. 

Giga  Information  Group  ana¬ 
lyst  Jean-Pierre  Garbani  says  the 
large  network  management  ven¬ 
dors  are  now  breaking  their 
“framework” software  down  into 
smaller  pieces  that 
can  be  more  easily 
integrated  into  a 
user’s  heterogen¬ 
eous  environment. 

“Enterprise  users 
will  be  able  to  enjoy 
a  less  monolithic 
type  of  implementa¬ 
tion.,"  Garbani  says. 

“And  the  big  frame¬ 
work  vendors  will 
have  to  provide  pro¬ 
ducts  better  than 
the  point  products 
that  are  cheaper  to 
buy  and  easier  to 
deploy  Enterprise  users  can  take 
advantage  of  that.” 

While  details  from  Aprisma 
were  not  forthcoming, enterprise 
users  who  will  be  beta-testing 
the  package  told  of  some  key  en¬ 
hancements  to  the  release.  Some 
new  features  will  include  up¬ 
graded  event  correlation,  which 
Kimberly  Kloskey  senior  WAN 
data  network  engineer  at  Aurora 
Health  Care  in  Milwaukee,  says 
will  help  her  quickly  determine 
the  root  cause  of  problems  in 
the  network. 

For  example, she  say’s  Spectrum 
will  help  her  identify'  when  seem¬ 


ingly  unrelated  events  lead  to  a 
network  brownout.  She  can 
then  configure  the  software  to 
take  corrective  action  when 
those  events  happen  again. 

“When  we  can  pinpoint  those 
events,  we’ll  know  before  the  help 
desk  when  the  network  isn’t  per¬ 
forming  well,  and  we  can  tell 
them  to  prepare  for  it,”  Kloskey 
says. 

“In  a  lot  of  cases,  we  can  get  it 
repaired  before  people  even 
know  it’s  not  working,”  she  says. 

Katherine  Stroud,  network 
administrator  at  Bloomington 
Hospital  in  Bloomington,  Ind., 
says  she  is  most 
anticipating  being 
able  to  share  data  be¬ 
tween  Spectrum  and 
other  third-party  ap¬ 
plications  when  she 
upgrades  in  Nov¬ 
ember  from  Spec¬ 
trum  6.01  to  the  large 
enterprise  release. 

“Right  now,  we  have 
several  consoles  for 
our  help  desk,  perfor¬ 
mance  and  network 
reports.  With  the  next 
release.  I’ll  be  able  to 
set  up  a  central  data¬ 
base  that  shares  the  information 
and  one  console  to  gain  access,” 
Stroud  says. 

She’s  also  looking  forward  to 
enhancements  in  the  software’s 
auto-discovery  features  that  will 
automatically  locate  and  ident¬ 
ify  network  devices  and  deliver 
an  updated  topology  map. 

On  the  road  to  IPO 

In  other  news,  Aprisma  last 
month  took  the  first  step  in 
becoming  a  publicly  traded 
company  when  it  completed  its 
Form  10  filing  with  the  Secur¬ 
ities  and  Exchange  Commis¬ 


More  online! 


Get  the  latest  network 
management  news. 

DocFinder:  6230 


sion.  Aprisma  was  the  infrastruc¬ 
ture  management  software  busi¬ 
ness  of  Cabletron  before  it  split 
into  four  separate  companies 
last  year. 

In  August,  Cabletron  shut  down 
its  business  and  spun  off 
Enterasys,  a  maker  of  enterprise 


hardware,  and  Riverstone  Net¬ 
works,  which  makes  service  pro¬ 
vider  hardware.  Aprisma  became 
a  subsidiary  of  Enterasys. 

Aprisma  has  applied  for  its 
shares  of  common  stock  to  be 
traded  on  the  Nasdaq  under  the 
symbol  APRM. 


Aprisma:  www.aprisma.com 
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BiiSite  ■  Lessons  from  Leadng  Users 

■apl, 

continued  from  page  23 

swings  into  full  operation  for  its  7,500  internal 
users. 

Key  will  be  access  control,something  that  today 
is  merely  user  identification  and  passwords  for 
the  mainframe  applications. 

Phase  1  of  the  project  has  established  single 
sign-on  capabilities  for  users  of  the  company’s 
intranet  portal  service. 

But  Phase  2  is  where  the  innovation  really  begins. 

Using  NetPoint  Web-access  control  software 
from  Oblix,  Langlois  is  creating  an  environment 
for  secure  access  for  users  and  developers  to  all 
the  application  objects,  called  “use  cases.” 

Use  cases,  which  are  stored  in  an  iPlanet 
Directory  Server,  are  miniprograms  that  provide 
such  functions  as  adding  a  customer  or  generat¬ 
ing  a  price. 

Administrators  will  use  Oblix  to  add  users  to 
the  authentication  system,  such  as  customer  ser¬ 
vice  representatives  and  field  support  people. 
Oblix  will  manage  access  control  to  applications 
and  individual  use  case  objects. 

On  the  developer  side,  the  software  controls 
which  developers  can  add  new  use  cases  and  set 
controls,  such  as  who  can  update  a  use  case. 

“We  are  going  to  essentially  secure  access  to 
use  cases  and  supply  administrators  with  con¬ 
trols  for  securing  those  use  cases,”  Langlois  says. 

Oblix  will  be  used  to  centralize  the  information 
on  who  can  see  what,  when,  where  and  how. “We 
are  using  Oblix  to  maintain  the  security  informa¬ 
tion  for  the  access  controls,  the  roles,  the  permis¬ 
sions,  the  assignment  of  permissions.  Oblix  is 
going  to  serve  that  management  function.” 


1 1  This  authentication  service 
wiii  make  the  building  of  applica¬ 
tions  simpier,  quicker,  f^ter  and 
cheaper.  91 

Michel  Langlois 

Director  of  enterprise  architecture,  APL 

The  next  step  will  be  to  deploy  the  delegated 
administration  so  partners  can  add  users  to  their 
accounts. 

“Down  the  road,  hopefully  4n  the  next  nine 
months,  we  will  be  able  to  go  to  our  partners  and 
say, ‘You  can  get  on  our  intranet  site  and  you  can 
set  up  your  own  users’”  Langlois  says.  Currently 
that  is  a  very  manual  process.  The  partner  has  to 
call  an  APL  administrator,  who  then  sets  up  the 
account. 

“In  this  new  world,  they  can  have  an  account, 
they  can  create  accounts  within  that  for  their 
own  users  who  can  then  submit  bookings  over 
the  Web  that  are  processed  automatically.  None 
of  that  was  possible  before,”  he  says. 

With  all  of  the  objects  and  reuse  built  into  the 
system,  Langlois  hopes  to  eventually  add  a  Web 
services  flavor  with  the  addition  of  standard  pro¬ 
tocols  such  the  Simple  Object  Access  Protocol. 

“This  business  is  an  old  business,  and  a  lot  of  it 
is  done  over  the  phone.  We  hope  to  automate  a 
lot  of  that,”  Langlois  says. 

And  if  he  does,  he  will  help  extend  the  innova¬ 
tion  story  that  APL  has  been  writing  since  1848 
when  company  founder  William  Henry  Aspin- 
wall  was  called  “harebrained”  for  contracting  to 
deliver  mail  by  steamship  from  Panama  to  San 
Francisco.  ■ 
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VeriSign,  llluminet  take  on  IP  telephony 

Merger  driven  primarily  by  new  technology  called  Enum. 


■  BY  CAROLYN  DUFFY  MARSAN 

MOUNTAIN  VIEW,  CALIF  —  The  combi¬ 
nation  of  dot<om  powerhouse  VeriSign 
and  telephony  services  provider  llluminet 
that  was  announced  last  Monday  is  driven 
largely  by  the  companies’  desire  to  domi¬ 
nate  an  emerging  technology  called  Enum 
that  bridges  the  Internet  and  the  public 
switched  telephone  network. 

Developed  by  the  Internet  Engineering 
Task  Force,  Enum  is  a  communications 
protocol  that  lets  an  end  user  type  a 
phone  number  into  a  Web  browser  and 
access  a  URL  of  Internet  resources  for  that 
number,  such  as  an  IP  telephony  e-mail  or 
Web  address. 

As  support  for  the  protocol  becomes 
available  in  PBXs  and  telephones,  Enum  is 
expected  to  provide  a  much-needed  ser¬ 


vice  for  initiating  phone  calls  over  the 
Internet.  Enum  also  offers  the  promise  of 
providing  one  point  of  contact  for  many 
communications  devices, such  as  phones, 
PCs  and  fax  machines. 

VeriSign,  which  operates  the  Internet’s 
.com,. net  and  .org  domains, has  been  run¬ 
ning  an  Enum  test  bed  for  about  a  year. 
VeriSign  plans  to  offer  registration  services 
to  its  3,300  corporate  customers  for  Enum 
numbers  and  directory  services  for  Enum 
numbers  that  match  domain  names  and  IP 
addresses. 

By  purchasing  llluminet  for  an  esti¬ 
mated  $1.2  billion  in  stock,  VeriSign 
gains  access  to  Illuminet’s  900-plus  local, 
long-distance  and  wireless  carrier  cus¬ 
tomers.  That  should  speed  up  VeriSign’s 
ability  to  offer  integrated  voice  and  data 
services  —  such  as  secure  short  messag¬ 


ing,  local  number  portability  and  voice- 
over-IP  bridging  —  over  the  Internet, 
company  officials  say. 

VeriSign’s  mission  is  “to  provide  trusted 
services  for  every  transaction  and  every 
communication  over  the  Internet,”  says 
Bob  Korzeniewski,an  executive  vice  presi¬ 
dent  of  corporate  development  at  VeriSign. 
“With  the  addition  of  llluminet,  we  can 
provide  these  services  in  the  voice  infra¬ 
structure.  . . .  They  are  the  VeriSign  of  the 
voice  network.” 

The  VeriSign/Illuminet  combination 
plans  to  offer  authenticated  voice  and 
data  services  to  corporate  and  service  pro¬ 
vider  customers.  These  services  will  let 
wireless  phones  link  specific  numbers  to 
Internet  domain  names  and  enable  callers 
to  reach  a  company’s  Web  site  by  speaking 
its  name  into  a  phone. 


With  llluminet,  VeriSign  “will  have  the 
ability  to  offer  these  services  more 
quickly  to  the  enterprise,”  Korzeniewski 
says.  “We’re  initially  rolling  out  through 
the  carriers.”  Enterprise-class  services 
will  be  available  by  next  year,  he  adds. 

“This  is  a  very  good  fit,”  says  David 
Fraley,  principal  analyst  with  Gartner. 
“One  of  the  big  businesses  that  llluminet 
does  is  local  number  portability.  One  of 
the  big  things  that  VeriSign  wants  is  to  get 
into  Enum,  which  is  essentially  the 
Internet  equivalent  of  local  number 
portability.  .  .  .Enum  is  still  the  key  to 
unlocking  voice  over  IP” 

The  VeriSign/Illuminet  deal  appears  tar¬ 
geted  at  NeuStar,  the  North  American  tele¬ 
phone  numbering  authority  that  provides 
clearinghouse  functions  similar  to  those 
offered  by  llluminet.  ■ 


hosting  lets  users  decide 

Who's  in  control? 

Interland’s  new  services  let  customers  choose  between  taking  a  hands- 
on  and  hands-off  approach  to  server  hosting. 


Service 

Description 

Price 

Power 

Customers  who  want  more  control  can  remotely  reboot 

Starts  at 

Dedicated 

their  servers,  access  the  internal  server  functions  and 

$350  per 

Hosting 

receive  e-mail  alerts  about  hardware  concerns. 

month 

Acceierator 

Customers  can  move  from  shared  to  dedicated  Web 

Starts  at 

Dedicated 

hosting  and  keep  the  same  user  interface,  as  well  as 

$550  per 

Hosting 

shared  database  and  media  servers. 

month 

■  British  Telecom  last  week  said  it 
expects  to  reach  a  decision  about  the 


breakup  of  telecommunication  carrier 
Concert  Communications,  its  joint  ven¬ 
ture  with  AT &T,  by  year-end.  Com¬ 
pany  officials  said  existing  customers 
would  receive  uninterrupted  service 
and  that  BT  would  like  to  retain  the 
customers  it  had  when  the  joint  ven¬ 
ture  was  launched  in  2000.  Concert 
has  lost  hundreds  of  millions  of  dol¬ 
lars,  according  to  AT &T  and  BT  re¬ 
ports.  The  venture  has  5,900  employ¬ 
ees  and  annual  revenue  of  $7  billion. 
Concert  has  struggled  amidst  a  weak 
wireless  market  and  fierce  interna¬ 
tional  price  competition,  BT  said. 

■  Verio,  a  wholly  owned  subsidiary  of 
NTT  Communications,  is  reducing  its 
workforce  by  25%.  More  than  3,000 
employees  at  the  ISP  and  Web  hoster 
are  expected  to  lose  their  jobs.  Verio 
plans  to  consolidate  offices  and  data 
centers  around  the  U.S..  although  it 
would  not  say  which  locations  will  be 
closed  or  consolidated. 


New  Interland 

■  BY  JENNIFER  MEARS 

ATLANTA  —  Interland  last  week  ex¬ 
panded  its  Web  hosting  line  for  small  and 
midsize  businesses  with  its  first  services 
since  being  reinvented  in  August  after 
Micron  Electronics  acquired  it. 

The  “new”  Interland  —  a  combination  of 
the  formerly  independent  company  and 
Micron’s  HostPro  Web  hosting  business  — 
has  unveiled  one  service  for  users 
demanding  more  technical  control  of  their 
hosted  servers  and  another  for  companies 
that  want  to  off-load  hosting  responsibili¬ 
ties  and  focus  on  core  business  concerns. 
The  services  marry  HostPro’s  experience 
serving  Web  developers  and  other  techni¬ 
cally  demanding  customers  with 
Interland’s  expertise  in  managed  hosting. 

One  of  the  new  services,  Fbwer  Dedi¬ 
cated  Hosting,  gives  customers  administra¬ 
tive  control  over  their  hosted  servers  from 
any  Web-enabled  device.  The  service  is 
enabled  by  a  CPU  card,  developed  by 
Interland  with  Hewlett-Packard,  that  is 
independently  powered  and  fitted  into  a 
hosted  server  so  customers  can  monitor 
the  server  remotely,  configure  it  to  send 
alerts  when  hardware  problems  arise,  and 
reboot  cold  servers  through  a  browser 
from  any  computer  with  Internet  access. 


“In  the  past,  if  a  customer’s  server  went 
down,  if  there  was  a  software  problem,  for 
example,  they  would  have  to  call  us  to 
restart  their  server” says  Mark  Alexander, an 
Interland  vice  president. 

The  other  new  offering.  Accelerator 
Dedicated  Hosting,  is  designed  to  make  it 
easier  for  companies  to  move  from  a 
shared  server  to  a  dedicated  server  envi¬ 
ronment.  In  fact,  the  customer’s  user  inter¬ 
face  doesn’t  change  even  after  the  move. 

Typically  companies  buy  into  a  shared 
hosting  environment,  in  which  several  sites 
share  one  server,  when  their  sites  are  small 
and  cost-savings  outweigh  performance  in 
importance.  But  companies  may  opt  for  a 


dedicated  server  as  their  sites  grow. 

Breaking  the  service  offerings  into  cate¬ 
gories  based  on  technical  control  will 
help  Interland  stay  competitive  as  others, 
such  as  telecommunications  companies, 
look  to  attract  small  and  midsize  hosting 
customers,  says  Helen  Chan,  an  analyst 
with  The  Yankee  Group. 

“They  are  ...  really  making  a  distinction 
between  those  that  have  technical  sophis¬ 
tication  and  those  that  don’t,"  she  says. 
“Built  into  the  product  sets  is  an  underly¬ 
ing  theme  of  flexibility’ 

Interland  has  33,000  square  feet  of  data 
center  space  in  hosting  centers  in  Atlanta; 
Boise,  Idaho;  and  Los  Angeles.  ■ 
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EYE  OK  THE 
CARRIERS 

Lisa 

Pierce 


People  often  refer  to  network  plan¬ 
ners  as  being  divorced  from  others 
who  work  “in  the  real  world,”  and 
figure  they  work  in  ivory  towers.  Two  re¬ 
cent  incidents  make  me  think  such  sep¬ 
aratists  must  reside  in  dark,  musty  base¬ 
ments.  Or  that’s  at  least  what  they 
deserve. 

In  the  first  instance, a  highly  distributed 
company  decided  to  reevaluate  and 
.switch  its  audioconferencing  providers. 
Many  companies  complain  about  the 
high  price  of  audioconferencing  ser¬ 
vices,  so  it  wasn’t  a  surprise  that  this  par¬ 
ticular  organization  was  shopping  for  a 
better  deal. 


Network  planning  in  the  real  world 


But  two  aspects  stopped  me  cold: 

•  It  turned  out  that  neither  the  com¬ 
pany’s  telecom  nor  IT  groups  created  the 
requests  for  proposal, conducted  the  eval¬ 
uation,  chose  the  provider,  or  signed  the 
contract.  Rather,  it  was  finance  that  did 
the  deal.  Not  surprisingly,  it  knew  nothing 
about  relative  provider  quality  and  never 
even  considered  the  possibility  of  special 
user  requirements.  And  yes,  there  was  a 
big  one. 

•  The  organization  in  question  holds 
lengthy,  weekly  conference  calls  be¬ 
tween  50  and  80  revenue-producing, 
knowledge  workers  who  call  in  from  a 
variety  of  sites.  Many  are  calling  in  from 
cell  phones,  hotel  rooms  phones  or 
home  phones. 

These  types  of  phones  typically  don’t 
have  “mute”  buttons  —  something  essen¬ 
tial  to  allow  for  an  orderly  meeting  in 
which  anyone  can  contribute  on  an  as- 
needed  basis.  And  the  particular  pro¬ 
vider  selected  doesn’t  support  keystroke 


combinations  to  mute  and  unmute 
phones.Talk  about  a  bad  fit. 

Readers  may  say,  “Well  that’s  what  you 
get  for  involving  business  administrators 
in  technical  work.”  But  sometimes  IT 
doesn’t  fare  any  better. 

For  instance,  a  fast-growing  company 
began  the  process  of  issuing  a  global 
telecom  RFPThe  IT  department  hired  a 
consultant  to  perform  the  upfront  work, 
including  creation  of  a  working  draft. 

One  of  the  important  issues  in  creating 
such  a  document  is  knowing  what  the 
existing  network  requirements  are,  and 
understanding  how  they  will  change 
over  the  planning  horizon  —  typically 
two  or  three  years.  The  input  of  several 
diverse  but  critical  groups  of  users  was 
essential  to  understanding  the  adequacy 
of  the  current  WAN  infrastructure  and 
requirements  for  the  future. 

Although  the  company  agreed  the  con¬ 
sultant  would  perform  this  work,  it  failed 
to  make  the  necessary  arrangements. 


Essentially,  the  draft  RFP  was  created  in 
a  vacuum.  As  a  result,  it  is  highly  unlikely 
the  WAN  topology  and  features  chosen 
will  serve  the  company  well  over  the 
next  two  to  three  years.  That  means  the 
company  will  be  forced  to  scramble, 
doubtlessly  paying  more  for  WAN  ser¬ 
vices  than  it  should.  For  the  network 
executive,  this  scenario  could  be  very 
career-limiting. 

My  advice;  When  undergoing  the  ser¬ 
vice  and  provider  evaluation  process, 
planning  is  critical.  It  should  always  be 
conducted  by  competent  technical  pro¬ 
fessionals,  under  the  network  execu¬ 
tive’s  watchful  eye.  But  it  also  absolutely 
must  take  into  consideration  and  inte¬ 
grate  the  current  and  future  require¬ 
ments  of  users.  Anything  less  is  simply 
poor  stewardship. 

Pierce  is  a  research  fellow  at  Giga  Infor¬ 
mation  Group.  She  can  be  reached  at 
lpierce@gigaweb.  com. 


VPN  service  aims  to  straighten  your  apps  priorities 

Ardent  uses  MPLS  and  RSVP  to  direct  traffic  better,  guarantee  bandwidth. 


■  BY  MICHAEL  MARTIN 

ARLINGTON,  VA. —  Ardent  Commun¬ 
ications  this  week  is  expected  to  launch 
a  VPN  service  that  will  let  enterprise  cus¬ 
tomers  prioritize  their  IP  WAN  traffic  over 
secure  connections  on  the  carrier’s 
nationwide  backbone. 

The  service  relies  on  Multi-proto¬ 
col  Label  Switching  (MPLS), which 
enables  the  assigning  of  a  label  to 
each  packet  at  an  edge  router  so 
that  traffic  can  be  transmitted 
directly  to  its  destination  point. 
Ardent’s  MPLS-VPN  requires  that 
customers  use  a  high-speed  con¬ 
nection,  with  a  fractional  T-1  line 
being  the  minimum. 

With  an  optional  Resource  Res¬ 
ervation  Protocol  (RSVP)  feature, 
customers  can  get  guaranteed 
bandwidth  over  the  Ardent  net¬ 
work  for  their  VPN  traffic. 

“RSVP  builds  a  bandwidth  com¬ 
mitment  within  the  network,”  says 
Michael  Abbott,  Ardent’s  CTO. 

“That  bandwidth  is  always  re¬ 
served  for  whoever  it  belongs  to.” 

Ardent,  formerly  known  as  CAIS 
Internet,  has  been  in  business  since  1993, 
offering  a  range  of  high-speed  data  and 
Web  services. 

Abbot  expects  most  customers  will 
want  to  .set  up  bandwidth  commitments 
tfirough  RSVP  and  use  that  bandwidth  to 
run  VPN  tunnels,  with  MPLS  operating 
within  the  tunnel. This  way,  users  get  guar¬ 
anteed  bandwidth  and  application  qual- 
ity-of-service  features  within  that  guaran¬ 
teed  bandwidth  tunnel. 

MPLS-VPN.  which  can  support  up  to  100 


simultaneous  tunnels  over  a  T-1  or  higher- 
speed  connection,  can  run  out  to  a  cus¬ 
tomer  premises  or  to  an  Ardent  point  of 
presence  that  is  closest  to  the  customer. 
To  run  MPLS  to  the  customer  premises 
will  require  a  suitable  router,  such  as  a 
Cisco  3640,  at  the  customer  site.  If  cus¬ 


“We  wanted  to  set  it  up  so  they  wouldn’t 
have  to  come  in  in  the  middle  of  the  night 
for  one  X-ra}(’  says  Tony  Perez,  a  network 
engineer  with  the  center. 

Before  MPLS-VPN  was  installed,  the 
radiologists  were  using  ISDN  to  access 
the  images.  Perez  says  the  technology 


Securing  enterprise 
communication 


Ardent’s  MPLS-VPN 
service  will  allow 
secure  connections 
between  two  or  more 
corporate  sites  over 
the  carrier’s  network. 
Features  include: 


Ardent’s  network 


/!  Boston 

New  York 

'Philadelphia: 


Support  for  fractionalT-1  pjggg 

and  higher-speed  connections. 


A  Resource  Reservation 
Protocol  option,  giving 
customers  dedicated 
bandwidth  tunnels. 

An  IP  Security  option  for 
remote  offices  using  DSL. 


on  DSL  to  Ardent’s  backbone.  DSL  sites 
connect  to  other  sites  within  the  VPN  net¬ 
work  through  IP  Security  and  Triple  Data 
Encryption  Standard  technology,  rather 
than  via  MPLS.  While  this  ensures  security, 
it  doesn’t  let  the  remote  sites  prioritize 
traffic.  E-VPN  supports  up  to  15  simultane¬ 
ous  VPN  tunnels. 

Customers  signing  up  for 
any  of  Ardent’s  new  offerings 
will  have  to  commit  to  at  least 
a  one-year  contract. 

One  target  market  for  the 
MPLS-VPN  service  is  compa¬ 
nies  that  may  consider  a 
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tomers  don’t  have  such  a  device.  Ardent 
will  work  with  them  to  set  up  an  en¬ 
crypted  service  between  their  sites  and 
Ardent  POP 

VA  Medical  in  Washington,  DC,  a  Vet¬ 
erans  Affairs  medical  center,  has  been  us¬ 
ing  Ardent’s  MPLS-VPN  service  for  about 
six  months. 

Six  of  the  center’s  radiologists  run  the 
VPN  over  their  DSL  lines,  so  they  can  ac¬ 
cess  X-rays  without  having  to  come  into 
the  center. 


was  too  slow,  but  the  center  couldn’t 
move  to  DSL  until  it  was  sure  the  DSL 
connections  were  secure. 

Ardent’s  VPN  service  met  the  center’s 
security  requirements,  he  says. 

Ardent  notes  that  it  does  not  offer  its 
MPLS-VPN  service  over  DSL  on  a  regular 
basis,  but  will  accommodate  major  cus¬ 
tomers  if  they  request  it. 

Ardent  is  also  introducing  a  comple¬ 
mentary  service,  called  E-VPN,  that  can 
securely  connect  branch  offices  that  rely 


y  move  away. from  frame  relay. 

A  big  advantage  of  an  IP 
VPN  over  a  frame  relay  net¬ 
work  is  ease  of  management, 
Abbott  says.  For  example,  if  a 
customer  wanted  to  add  a 
new  site  to  an  existing  frame 
network,  the  customer  would 
have  to  modify  the  frame  con¬ 
nections  of  all  the  other  sites 
on  the  network.  With  an  IP 
VPN,  the  customer  only  needs 
to  reconfigure  settings  at  the 
new  site,  he  says. 

Initial  pricing  on  MPLS-VPN  starts  at  $200 
per  site  per  month.  E-VPN  starts  at  $150  per 
site  per  month.  Customers  purchasing  the 
RSVP  option  will  be  charged  per  megabit 
for  their  bandwidth  commitment. 

Ardent:  www.ardentcomm.com 


VPNs 
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GO,  audio  andWeb  collaboration  technologies. 


Travel’s  loss  could  be  conferencing’s  gain 


■  BY  DENISE  PAPPALARDO  AND 
CAROLYN  DUFFY  MARSAN 

While  many  Americans  have  vowed  not  to  let  last 
month’s  terrorist  attacks  on  the  US.  change  their 
ways  of  life,  it’s  clear  that  some  things  will  never 
be  the  same.  Business  travel  is  likely  to  be  one  of  them. 

Many  companies  are  looking  harder  than  ever  at  alter¬ 
natives  to  flying,  as  fewer  flights  are  available,  airport 
waits  lengthen  and  security  concerns  increase. While 
video-,  audio-  and  Web  conferencing  are  not  brand-new 
technologies,  companies  have  started  giving  them  a 
second  look  or  beefing  up  their  usage  of  them. 

The  National  Business  Travel  Association  found  that 
more  than  half  of  the  60  travel  managers  it  interviewed 
the  week  after  the  attacks  said  their  companies  were 
reducing  travel  and  more  than  half  of  them  have 
already  done  so  (although  the  attacks  were  not  the 
only  reason  cited  for  the  travel  cutbacks).  Close  to  90% 
of  those  surveyed  expect  to  deploy  videoconferencing 
gear  or  services  to  keep  communications  strong  while 
travel  is  down. 

While  conferencing  technology  is  often  cited  as  “the 
next  big  thing”  whenever  there  is  an  airline  strike  or 
plane  crash,  the  fact  that  the  events  of  Sept.  1 1  hap¬ 
pened  in  the  US.  and  were  so  unprecedented  in  scope 
should  result  in  a  sustained  increase  in  usage  this  time 


A  new  survey  of  60  corporate  travel  managers 
found  that  less  travel  is  planned  in  the  wake 
of  the  recent  terrorist  attacks  on  the  U.S _ 


Will  your  company  travel  less? 
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...  a  trend  that  should  boost  demand  for 
videoconferencing  systems. 

Projected  revenue  for  videoconferencing  hardware 
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around,  says  Andrew  Davis,  managing  partner  at  con¬ 
sulting  firm  Wainhouse  Research. 

Conferencing  at  Xerox 

Xerox  is  one  company  that  has  already  seen  a  swell 
in  conferencing  usage  among  its  employees  since  the 
attacks.  Xerox,  which  uses  video-,  audio-  and  docu¬ 
ment-conferencing  services  from 
WorldCom  in  its  offices  around  the 
world,  went  from  approximately  10 
to  15  videoconferences  per  month 
to  about  20  to  30  in  recent  weeks, 
says  Gary  Foley,  manager  of  global 
conferencing  services.  A  week 
after  the  attacks.  Xerox  had  to  dust 
off  some  of  its  PictureTel  video- 
conferencing  systems  that  weren’t 
being  used  in  order  to  meet 
increased  demand. 

Although  Xerox  does  not  have  an 
official  restriction  on  travel,  employees  are  traveling  at 
their  own  discretion,  Foley  says. 

Employees  are  being  asked  to  give  more  considera¬ 
tion  about  the  locations  where  they  may  have  to  travel 
and  whether  it’s  absolutely  necessary  for  them  to  be 
there  in  person. 

Earlier  this  year.  Xerox  began  encouraging  employees 
to  use  conferencing  as  a  travel  alternative,  but  also  to 
use  conferencing  smarter,  Foley  says.  Employees  were 
asked  to  only  use  videoconferencing  —  the  most 
expensive  of  the  three  conferencing  services  —  when 
they  really  needed  to  see  the  other  person.  Whenever 
employees  are  planning  a  videoconference,  they 
should  ask  if  Web-based  document-  or  audioconferenc¬ 
ing  might  work  just  as  well,  he  says. 

Audio-  and  Web-based  conferencing  are  more  conve¬ 
nient  for  most  employees  because  they  can  set  them 
up  from  their  desktops,  Foley  says.  With  video,  they  have 
to  go  to  the  room  where  the  equipment  is  deployed. 

In  any  given  month, Xerox  employees  use  40,000  to 
50,000  audio-  and  document-conferencing  lines,  Foley 
says.  He  does  not  have  the  exact  numbers  on  increased 
usage  but  knows  it’s  significant.  WorldCom  told  Foley 
that  it  has  had  customer  service  people  working  12-  to 
16-hour  days  to  handle  the  onslaught  of  calls  for  audio- 
and  Web  conferencing  since  Sept.  1 1 . 

On  a  smaller  scale 

While  Xerox  is  pleased  with  WorldCom’s  offerings, 
another  organization  has  enjoyed  the  benefits  of  going 
with  a  smaller  service  provider. 

Los  Angeles  law  firm  Paul,  Hastings,  Janofsky  and 
Walker  switched  from  using  AT&T’s  and  WorldCom’s 
teleconferencing  services  to  Latitude  Communication’s 
MeetingPlace  about  18  months  ago.  MeetingPlace  is  a 
Web-based  service  that  provides  audioconferencing, 
presentation  viewing  and  document  sharing.  Built  on 
Microsoft’s  NetMeeting  software,  MeetingPlace  lets 
attorneys  schedule  and  cancel  Web-based  meetings 
through  the  group  calendar  built  into  Microsoft’s  Ex¬ 
change  e-mail  software. 

“The  return  on  our  investment  was  very  quick,”  says 
CIO  Mary  Odson.“Now  we’re  just  paying  for  an  inbound 


toll  call,  which  is  under  three  cents  per  minute.  We 
saved  money  really  quickly  just  in  using  MeetingPlace 
for  all  our  internal  teleconferences,  and  it  is  providing 
benefits  for  our  clients  as  well.” 

Use  of  MeetingPlace  been  steady  since  the  terrorist 
attacks,  Odson  says.The  law  firm  used  MeetingPlace  to 
conduct  an  all-day  meeting  Wednesday,  Sept.  12,  that 
was  originally  scheduled  for  its  New  York  City  office. 

“We  are  now  pro¬ 
moting 

MeetingPlace  again 
to  people  who  may 
not  have  taken 
advantage  of  its 
capabilities  in  the 
past,”  Odson  says. 

The  law  firm  pro¬ 
vides  its  workers 
with  a  VPN  that  lets 
them  dial  in  to 
MeetingPlace  from  home  or  other  remote  locations. 
Currently  attorneys  at  the  law  firm’s  seven  locations  in 
the  U.S.  can  access  MeetingPlace  via  a  Web  browser 
through  a  central  server  in  Los  Angeles. 

Although  the  law  firm  plans  to  add  access  to  Meeting- 
Place  for  its  Tokyo  and  London  offices,  Odson  doesn’t 
expect  the  software  to  replace  business  travel. “We 
anticipate  as  much  travel  as  we  had  in  the  past,”  Odson 
says.  “The  way  our  attorneys  work,  they  practice  global¬ 
ly,  so  travel  is  key” 

But  the  company  may  need  to  add  another T-1  line  to 
support  increased  demand,  she  says. 

Another  alternative  for  businesses  is  to  use  meeting 
space  from  a  company  such  as  HQ  Global  Workplaces. 
The  Dallas  company  offers  businesses  professional 
meeting  rooms  that  include  video-,  audio-  or  Web  con¬ 
ferencing  in  400  locations  in  the  U.S.  and  overseas. 

Users  who  anticipate  difficulties  in  pulling  off  their 
next  sales  meetings  can  instead  choose  to  team  with  a 
company  that  will  set  up  meeting  rooms  in  multiple 
cities  and  even  cater  food. 

This  may  be  a  solid  alternative  for  users  who  do  not 
anticipate  major  changes  in  the  way  they  travel  in  the 
long  run.  Instead  of  buying  a  Web  conferencing  service 
or  a  new  PictureTel  system,  users  can  hook  up  with  a 
company  such  as  HQ  to  set  up  conferences  from  time 
to  time. 

HQ  uses  videoconferencing  gear  from  Polycom, 
PictureTel  and  Tandberg, says  Carla  Clements,a  product 
manager. The  company  connects  its  various  sites  via 
AT&T  ISDN  services,  she  says. 

Call  volumes  at  HQ  have  nearly  quintupled  since  the 
terrorist  attacks,  Clements  says.  Pfeople  called  to  ask 
about  the  company’s  services  and  to  book  conferences 
across  the  regions  where  the  company  has  offices. 
“Confirmation  bookings  have  tripled," she  says. 

One  other  point  that  existing  or  potential  conferenc¬ 
ing  customers  should  consider  as  demand  increases 
and  more  companies  try  to  cash  in  on  the  demand: 
Prices  for  equipment  and  services  are  likely  to  drop.  So 
just  as  airlines  are  gearing  up  to  offer  big  ticket  dis¬ 
counts.  there  could  also  be  some  conferencing  bar¬ 
gains  in  the  not-to-distant  future.  ■ 


Close  to  90%  of  those  surveyed 
expect  to  deploy  videoconfer 
encing  gear  or  services  to  keep 
communications  strong  whiie 
travei  is  down. 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


Riverstone  to  make  IP  routers  more  SONET-like 


■  BY  PHIL  HOCHMUTH 

SANTA  CLARA  —  Riverstone  Networks 
this  week  will  unveil  software  for  its  metro¬ 
politan  Ethernet  routers  designed  to  give 
service  providers  SONET-like  reliability  in 
IP  routing  equipment. 

Riverstone’s  Hitless  Protection  System 
(HPS)  software  can  be  installed  on  an 
existing  Riverstone  box  to  let  a  router 
with  dual  control  modules  failover  more 
quickly  than  a  similarly  configured 
device  with  one  active  control  module 
and  one  “warm  standby”  card.  Riverstone 
says  the  software  can  cut  router  down¬ 
time  caused  by  component  failure  or 
equipment  maintenance  from  10  minutes 
to  8  seconds. 

HPS  establishes  a  “heartbeat”  communi¬ 
cation  link  between  redundant  control 
modules,  letting  a  primary  control  blade 


Takes 

■  The  Resilient  Packet  Ring 
Alliance  announced  that  the  IEEE 
802.17  working  group  made  progress 
on  the  draft  development  of  the  stan¬ 
dard.  During  a  meeting  in  San  Jose, 
members  made  more  than  30  detailed 
technical  presentations.  Attendees 
also  agreed  on  the  outline  of  the  final 
draft.  The  RPRA  says  it  had  a  record 
turnout  of  142  attendees.  The  RPRA 
also  says  that  Chip  Engines,  a  semi¬ 
conductor  company,  is  the  first  to 
develop  a  family  of  integrated  circuits 
based  on  RPR.  The  firm  is  a  new 
member  of  the  alliance,  which  is  now 
composed  of  17  companies. 
www.RPRAIIiance.org 

■  ATM  switch  start-up  WaveSmith 
Networks  last  week  announced  a  ser¬ 
vice  to  assist  users  in  deploying  its 
Distributed  Node  switch.  The  Wave- 
Pro  Customer  Care  Program  provides 
training  and  support  services  online 
and  offline,  as  well  as  supplemental 
consulting  and  project  management 
resources.  Questions  are  answered 
24-7, 365  days  a  year,  it  says.  www. 
wavesmithnetworks.com 


update  its  backup  every  second  with  infor¬ 
mation  on  what  the  router  is  doing.  If  the 
primary  module  goes  down  or  is  taken 
offline,  the  back-up  control  module  can 
take  over  all  routing  functions  within  8  sec¬ 
onds,  the  company  says. 

Previously,  Riverstone  routers  configured 
with  dual-control  modules  —  as  well  as 
similarly  configured  competing  products 
—  could  take  up  to  10  minutes  to  recover, 
Riverstone  says. 

HPS  also  lets  service  providers  imple¬ 
ment  a  single  redundant  router  as  an  alter¬ 
native  to  having  two  separate  routers  that 
use  Virtual  Router  Redundancy  Protocol 
(VRRP)  for  failover,  Riverstone  says.  While 
VRRP  can  improve  router  failover  to  1 
minute  of  downtime,  the  company  says, 
HPS  is  still  faster  and  does  not  require  the 
deployment  of  two  chassis,  which  can  be 
expensive  in  terms  of  equipment  and  col¬ 
location  space  costs. 

The  HPS  software  upgrade  is  available  in 
Version  8.0  of  Riverstone’s  router  software, 
which  is  available  as  a  free  upgrade  for  all 
Riverstone  router  models. 


■  BY  TERRI  GIMPELSON 

Tsunami  Optics  last  week  announced 
three  new  metropolitan  optical  access 
products  designed  to  let  service  providers 
reduce  the  cost  of  provisioning  high-band¬ 
width  services  to  companies. 

The  products  are  an  integrated  four-chan¬ 
nel  coarse  wavelength  division  multiplex¬ 
ing  mux/demux,  an  eight-channel  CWDM 
multiplexer,  an  eight-channel  demulti¬ 
plexer  and  a  CWDM  add/drop  module  that 
can  add  and  drop  up  to  four  wavelengths 
per  fiber.  CWDM  reduces  the  cost  of  provi¬ 
sioning  optical  access  services  because  it 
uses  uncooled  lasers  rather  than  cooled 
lasers  used  in  dense  wavelength  division 
multiplexing  (DWDM)  systems. 

The  four-channel  mux/demux  is  called 
the  MetroChannel  M.  It  couples  a  multi¬ 
plexer  and  demultiplexer  into  one  module, 
and  can  combine  up  to  four  wavelengths 
onto  one  single-mode  fiber  or  separate  four 
wavelengths  onto  separate  fibers. 

Each  wavelength  operates  with  20  nm 
separation  to  prevent  cross-talk, and  is  pro¬ 
tocol  and  bit-rate  independent.  Tsunami 
officials  say 


Riverstone’s  resilient  packet  push 

In  addition  to  HPS,  Riverstone  during  the 
next  few  months  will  introduce  several 
other  software  and  hardware  features  for  its 
metropolitan  Ethernet  routers  intended  to 
boost  reliability  of  router  hardware  and 
software-based  functions. 

Next  month,  Riverstone  is  expected  to 
release  its  own  version  of  Resilient  Packet 
Ring  (RPR)  technology  with  its  Rapid  Ring 
Spanning  Tree  (RRST)  software.  RPR  is  an 
emerging  standard  that  takes  advantage  of 
the  dual  fiber-optic  ring  topology  of  SONET 
networks  —  if  the  primary  ring  fails,  the 
back-up  ring  kicks  in  and  moves  traffic  in 
the  opposite  direction. 

RPR  would  use  both  rings  to  transmit  traf¬ 
fic  and  implement  quality-of-service  priori¬ 
tization  to  traffic  flows  in  the  event  of  a  line 
break,  giving  higher-priority  flows,  such  as 
IP  voice,  more  bandwidth  on  the  back-up 
ring  over  lower  priority  traffic,  such  as 
e-mail  or  music  downloads. 

According  to  Riverstone,  its  RRST  soft¬ 
ware  —  based  on  the  IEEE  802.  Iw  Rapid 
Spanning  Tree  algorithm  —  could  be  used 


The  eight-channel  products  —  the 
MetroChannel  M-8  multiplexer  and  D-8 
demultiplexer  —  are  separate  modules 
that  combine  or  separate  eight  wave¬ 
lengths  onto  a  single-mode  fiber.  Like  the 
\A,  the  M-8  and  D-8  are  bit-rate  and  proto¬ 
col  independent  and  operate  with  wave¬ 
lengths  spaced  20  nm  apart. 

The  MetroChannels  AD-1,  AD-2,  AD-3  and 
AD-4  are  coarse  wavelength  optical 
add/drop  modules  (OADM)  that  can  add 
and  drop  from  one  to  four  wavelengths 
onto  a  single-mode  fiber.  The  OADMs  also 
operate  with  the  same  20  nm 
spacing  between  wavelengths 
and  are  protocol  and  bit-rate 
independent. 

The  new  products  are  Tel¬ 
cordia-  and  NEBScompliant, 
and  support  wavelengths  from 
1,471  nm  to  1,61 1  nm. 

Tsunami  says  the  products 
were  designed  to  fit  into  a  met¬ 
ropolitan-access  network  that 
transports  bandwidth  less  than 
60  or  70  kilometers.  None  of 
the  products  uses  amplifica¬ 
tion  to  transport  wavelengths. 


Along  with  its 
Hitless  Protection 
System  (HPS) 
software  for  its 
routers,  River¬ 
stone  will  soon 
introduce  other 
features  to  make 
its  IP  routing 
equipment  more 
SONET-like: 

Rapid  Ring  Spanning 
Trees 

Riverstone  Racket 
Ring  technology 

MPLS  failover 

to  introduce  basic  SONET-like  link  recovery 
functions  for  Ethernet  switches  deployed  in 
a  ring  topology  where  traffic  flows  in  one 
direction.  In  case  of  a  link  or  node  failure 
on  a  metropolitan  Ethernet  ring,  RRST  soft- 
See  Riverstone,  page  32 


Tsunami  says. 

Karen  Liu,  director  of  optical  compo¬ 
nents  at  consulting  firm  RHK,  says  the 
value-proposition  Tsunami  offers  with 
CWDM  technology  is  the  lower  cost  associ¬ 
ated  with  using  uncooled  lasers. 

“That’s  the  real  competitive  side  of  the 
equation,”  she  says.  “Tsunami  is  the  first  to 
develop  this  kind  of  product  to  really  help 
reduce  costs.  Before  this  there  was  a  big 
jump  from  a  single  wavelength  system  to 
DWDM.  This  fits  into  that  gap  for  cost  and 
function.” 

LuxN  has  a  similar  offering 
with  its  WideWav  product 
line, as  does  ON!  Systems  with 
its  Online  2500.  Ocular 
Networks’  OSX  access  switch 
and  Riverstone  Networks’ 
RSI 600  also  have  CWDM 
capabilities.  NEC  can  support 
CWDM  in  its  MG8000  Gigabit 
Ethernet  multiplexer. 

The  products  are  shipping 
now,  and  start  at  $290  per 
wavelength, Tsunami  says. 

Tsunami:  www.tsunami 

optics.com 


Tsunami’s  new  lowend  optics  products 


More  online! 


See  how  CWDM  slacks  up 
against  passive  optical  networks, 
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Riverstone's 

goal: 

Rock-solid 


HPS  runs  un  all  River¬ 
stone  nuters,  nduduig 
the  RS  38000.  • 
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Nortel’s  alternative  for  metro  Ethernet  recovery 


■  BY  TERRI  GIMPELSON 

Nortel  is  offering  service  pro¬ 
viders  an  alternative  to  a  recently 
ratified  standard  for  recovering 
Ethernet  networks,  one  the  com¬ 
pany  claims  makes  better  use  of 
redundant  switches,  links  and 
bandwidth. 

The  company  is  pitching  its 
Split-Multilink  Trunking  Protocol 
(Split-MlJ)  technology  as  an  al¬ 
ternative  to  the  IEEE  802.  Iw 
Rapid  Spanning  Tree  Protocol 
(RSTP)  for  reconverging  metro¬ 
politan  Ethernet  networks.  Split- 
MLT,  announced  by  Nortel  last 
spring,  is  targeted  at  carriers 
looking  for  a  way  to  make  data 


services  more  profitable  by  pro¬ 
viding  more  reliability  for  Ether¬ 
net  services  than  subsecond 
recovery  time,  Nortel  says. 

Split-MLT  is  based  on  the  IEEE 
802. lab  multilink  trunking  proto¬ 
col,  which  is  designed  to  enable 
back-up  links  from  a  group  of 
high-bandwidth  trunks  and  traf¬ 
fic-load  balancing  across  those 
trunks.  As  such,  Split-MLT  lets  ser¬ 
vice  providers  configure  redun¬ 
dant  paths  to  a  company  or  multi¬ 
tenant  building  without  routing 
protocols  such  as  Open  Shortest 
Path  First  or  Routing  Information 
Protocol,  Nortel  says. 

The  software  runs  on  Nortel’s 
Passport  8600  Ethernet/lP  rout¬ 


■  HOW  IT  WORKS 


Split-MLT 

Split-MLT  addresses  Ethernet 
reliability  by  making  use  of  redundant 
links  in  addition  to  providing  1-second 
recovery. 


Access 


Nortel  8600  switches 
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LAN 

Nortel  Passport 
8600  switches 


^  Split-MLT  ^ 


Aggregation  layer 


Q  Split-Mtr  supports  Virtual  Router 
Redundancy  Protocol  and  Multi- 
link  Trunking  Protocol  (MLT) 
802.1ab.  Unlike  MLT,  Split-MLT 
allows  traffic  to  be  shared  among 
three  switches,  making  the 
network  more  redundant  in  case 
of  a  node  or  port  failure. 


©  Once  the  Nortel  8600 
switches  receive  a  response 
from  the  destination  port, 
both  memorize  the  port’s 
location.  In  memorizing  and 
sharing  this  information,  the 
boxes  are  prepared  to  handle 
traffic  should  one  box  fail. 


O  LAN  traffic  is 
forwarded  to  the 
Nortel  8600 
switches  at  the 
aggregation  layer, 
and  from  there  it 
is  flooded  out  to 
all  ports. 


Riverstone 

continued  from  page  31 

ware  would  identify  the  outage 
and  redirect  traffic  in  the  oppo¬ 
site  direction,  the  company  says. 

"This  is  the  poor  man’s  version 
of  RPR  for  pure  Ethernet  over 
dark  fiber  networks,”  says  Steve 
Garrison,  Riverstone’s  director  of 
corporate  marketing. 

Riverstone  is  also  expected  to 
relea.se  new  line  cards  for  its 
high-end  metropolitan  routers, 
which  include  the  RS  8000, 16000 
and  38000  models.The  line  cards 
will  interoperate  with  Cisco’s  pro¬ 
prietary  version  or  RPR,  called 


Dynamic  Packet  Transport. 

Riverstone  says  the  line  cards 
will  be  aimed  at  letting  service 
providers  work  its  gear  into  Cisco- 
based  metropolitan-area  net¬ 
works.  Costs  haven’t  been  set,  and 
a  release  date  wasn’t  disclosed. 

Riverstone  is  expected  to 
release  software  upgrades  in 
January  for  its  Multi-protocol 
Label  Switching  line  cards  that 
provide  MPLS  tunnel  failover  for 
traffic  flows.  The  software  would 
set  aside  a  bandwidth  “reservoir" 
that  could  pick  up  traffic  from  a 
failed  MPLS  tunnel. 

Riverstone;  www.riverstonenet 
works.com 


ing  switch. 

Gary  Southwell,  Nortel’s  direc¬ 
tor  of  optical  Ethernet  product 
marketing,  says  the  company 
sought  to  address  three  Ethernet 
reliability  issues  with  Split-MLT: 
link  and  node  failure,  conversa¬ 
tion  preservation  and  maximum 
bandwidth  utilization. 

For  link  and  node  failure,  Split- 
MLT  makes  a  pair  of  aggregation 
switches  look  like  a  single  switch 
to  the  rest  of  the  network.  The 
switches  communicate  Media 
Access  Control  (MAC)  addresses 
between  each  other  using  Split- 
MLT  and  the  Virtual  Router  Re 
dundancy  Protocol. 

Both  switches,  connected  by 
multiple  Gigabit  Ethernet  links, 
learn  destination  MAC  addresses 
of  traffic  from  switches  connect¬ 
ed  to  one  of  the  Passport  8600s.  If 
one  node  fails,  Split-MLT  ensures 


the  remaining  node  has  the  des¬ 
tination  MAC  address  informa¬ 
tion  to  forward  traffic  on  behalf 
of  the  primary  switch,  Nortel 
says.  This  is  done  on  a  per-ses- 
sion  basis,  which  helps  ensure 
conversation  preservation. 

If  one  of  the  links  between  the 
switches  is  lost,  Split-MLT  spreads 
sessions  over  the  remaining  work¬ 
ing  links.  Nortel  claims  this  makes 
more  efficient  use  of  available 
bandwidth  by  eliminating  the 
wasted  redundancy  fiber  that  is 
used  only  if  a  failure  occurs. 

While  Split-MLT  might  seem  to 
be  a  more  feature-rich  alternative 
to  RSTP  it  still  does  not  provide 
the  50  msec  recovery  of  SONET, 
which  is  the  benchmark  every 
service  provider  considering  Eth¬ 
ernet  is  shooting  for. 

“The  one-second  recovery  time 
Split-MLT  has  is  the  same  for 


RSTP” says  Sterling  Perrin,an  ana¬ 
lyst  at  market  research  firm  IDC. 
“And  if  you  look  at  this  technol¬ 
ogy  as  an  alternative  to  SONET 
equipment,  it  doesn’t  really  meet 
the  requirements  of  sub-50  msec 
recovery  that  SONET  alternatives 
need  to  aim  for.” 

Perrin  says  Resilient  Packet  Ring 
and  next-generation  SONET  pro¬ 
posals  such  as  Multiservice 
Provisioning  Platforms  (MSPP) 
are  closer  to  what  service 
providers  are  looking  for  in  terms 
of  Ethernet/SONET  hybrids. 

Split-MLT  has  shipped  on  the 
Passport  8600  since  July. Southwell 
says  Nortel  is  now  working  to 
make  Split-MLT  work  in  the  long- 
haul  network  using  a  tagging 
mechanism  and  an  Ethernet  User- 
to-Network  Interface  to  keep  cus¬ 
tomer  traffic  separate. 

Nortel;  www.nortel.com 


Vibrant  Solutions  wants  to  see  the  money 
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PROFILE:  VIBRANT 

Fairfax,  Va. 

Founded: 

May  2001 

Product: 

ViewLogic,  a  software  platform  and  suite  of 
applications  for  financial  analysis  of  carrier 
network  operations. 

Management: 

Rich  LaPerch,  CEO;  Rick  Mahuson,  CTO;  Bill 

Welch,  CFO. 

Financing: 

$26  million,  first  round. 

Empioyees: 

125 

Customers: 

LECs,  IXCs,  PTTs,  ISPs,  ASPs,  wireless  and 
content  providers. 

Fun  fact: 

Vibrant  was  formed  by  the  merger  of  three 
companies:  InformationView,  Network  Audit 
Control  andTeleCon. 

■  BY  JIM  DUFFY 

FAIRFAX, VA.  —  Software  devel¬ 
oper  Vibrant  Solutions  this  week 
will  unveil  a  suite  of  applications 
that  add  a  twist  to  traditional 
billing,  inventory  mediation  and 
operations  support  system  pack¬ 
ages  for  service  providers. 

Formed  in  May  by  the  merger  of 
three  separate  firms.  Vibrant  will 
roll  out  Business  Intelliegence 
Suite,  a  package  that  performs  fin¬ 
ancial  analysis  of  network  oper¬ 
ations  and  transactions  between 
service  providers.  The  bundle 
runs  on  a  new  Vibrant  software 
platform  called  ViewLogic  that 
provides  the  user  interface  and 
interactive  environment  for  Busi¬ 
ness  Intelligence  Suite. 

The  software  runs  on  servers 
distributed  throughout  the  ser¬ 
vice  provider  network  or  collo¬ 
cated  with  mediation  systems.  It 
collects  data  from  operation  sup¬ 
port  systems  (OSS),  billing,  inven¬ 
tory  provisioning  and  mediation 
systems,  and  from  network  ele¬ 
ments  such  as  switches.  It  then 
turns  data  into  reports  used  for 
financial  analysis  and  auditing, 
such  as  accounts  payable, 
j  Collected  data  examples  in- 
I  elude  billing  systems  invoices,  IP 
data  records  from  switches,  net¬ 
work  inventory,  network  event 
records,  and  tariffed-service  and 
bandwidth-rate  information.  In¬ 
stead  of  competing  with  OSS, 


billing,  inventory  and  mediation 
systems,  the  software  draws  on 
these  systems  as  data  sources. 

“One  of  the  business  problems 
out  there  today  is  that  lack  of 
view  into  the  financial  aspects  of 
the  carrier’s  business,”  says  Yankee 
Group  analyst  Jason  Briggs. 

Although  Vibrant’s  new  software 
will  complement  existing  opera¬ 
tions  and  billing  systems,  it  will 
also  compete  with  some  specific 
functions  performed  by  them.  For 
example.  Business  Intelligence 
Suite  is  designed  to  automate  the 
process  of  billing  for  intercon¬ 
nect  charges  a  service  provider 
incurs  for  linking  to  another  ser¬ 
vice  provider’s  net. 

Tracking  and  invoicing  inter¬ 


connect  usage  has  usually  fallen 
under  the  domain  of  specialized 
and  general-purpose  billing  sys¬ 
tems,  Briggs  says.  But  Vibrant 
software  is  designed  to  auto¬ 
mate  this  process. 

Automating  interconnect  bil¬ 
ling  will  be  key  to  the  acceptance 
of  the  Vibrant  software.  Between 
50%  and  60%  of  carriers’  revenue 
is  consumed  by  interconnect 
costs,  and  the  error  rate  in  these 
invoices  is  typically  8%  to  12%, 
Vibrant  says. 

Viewlx)gic  and  Business  InteF 
ligence  Suite  will  undergo  trials 
in  December  and  will  be  avail¬ 
able  in  January  2002.  Pricing  is 
customer-specific. 

Vibrant;  www.  vibrant- 1. com 


Enter  to  WIN  A  FREE 

Spot  Cooler 
from  APC! 

All  entrants  will  receive  a  FREE 
Enterprise  Availability  Kh. 

Just  mail  or  fax  this  completed  coupon  or  contact  APC  for  a 
chance  to  win  a  FflEE  APC  Spot  Cooler.  Better  yet  order  it 
today  at  the  APC  Web  site! 

Key  Code 

http://promo.apc.com  cSIOv 

(888)  28»-APCC  x2128  •  FAX:  (401)  788-Z797 


Legendary  Reliability' 


Enter  to  WIN  A  FREE  APC  Spot  Cooler! 

All  entrants  will  receive  a  FRQ  Enterprise  Availability  Kh. 

□  YES!  Enter  me  to  win  a  FREE  Spot  Cooler  from  APC.  Also,  please  send  me 

my  FREE  Enterprise  Availability  Kit 

□  NO,  I'm  not  interested  at  this  time  but  please  add  me  to  your  mailing  list. 


Space  efficient,  portable, 
and  easy  to  use.  the  1.6  Kw 
NetworMIR  1000  cools 
senrer  closets,  home/office 
environments,  or  anywhere 
spot  cooling  is  needed. 


Name: 

Title: 

Company: 

Address: 

Address  2: 

City/Town: 

State: 

Zip: 

Country: 

Phone: 

Fax: 

E-mail: 

□  Yes!  Send  me  more  information  via  e-mail  and  sign  me  up  for  APC  PowerNews  e-mail  newsletter.  \  Key  Code  c310y  | 


What  type  of  availability  solution  do  you  need? 

O  UPS:  0-1  BkVA  (Single  Phasel  O  UPS:  10-80kVA  (3  Phase  AC)  □  UPS:  80+ kVA  (3  Phase  ACI  ODCPower 
□  Network  Enclosures  and  Racks  □  Precision  Air  Conditioning  □  Monitoring  and  Management  □  Cables/Wires 
in  Mobile  Protection  □  Surge  Protection  Q  UPS  Upgrade  □  Don't  know 
Purchase  timeframe?  □  <  1  Month  □  1-3  Months  CJ  3-12  Months  D  1  Yr.  Plus  O  Don't  know 
You  are  (check  1):  □  Flome/Home  Office  □  Business  (<1000  employees)  □  Large  Corp.  (>1000  employees) 
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Some  VoIP  conversations  should  be 
intenupted,  but  never  by  power  problems 


APC  provides  all  the  components  necessary  for  an  end-to-end 
power  protection  solution  for  the  VoIP  environment. 


The  7  pieces  of  the  VoIP  availability  puzzle 


•  Clean,  continuous  power  as  well  as  "ride-through"  power  during 
brownouts,  surges  and  spikes. 

•  Extended  back-up  power  in  the  event  of  an  extended  power  outage. 

•  Redundant,  hot-swappable  and  scalable  components  to  allow  growth  as  well 
as  service  without  interruption. 

•  Instant  notification  of  critical  power/UPS  issues. 

•  Ability  to  remotely  control  selected  power  outlets  in  order  to  reboot 
hung  switches. 

•  Ability  to  ensure  optimal  temperature  and  humidity  within  remote  closets. 

•  Ability  to  keep  track  of  and  maintain  health  of  power  protection  systems 

across  the  WAN,  over  time. 
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APC  provides  all  the  components  necessary  for  end-to-end  power  protection 
solutions  for  the  VoIP  environment  -  visit  apcc.com/buy/  and  see  what 


Legendary  Reliability™  can  do  for  your  business. 


Symmetra®  RM 

The  new  Symmetra  RM  puts  the 
high  availability  of  the  proven 
and  patented  Symmetra®  Power 
Array”  technology  in  a  rack-mount¬ 
able  form.  Through  the 


included  Web/SNMP  Management 
iCard,  you  can  monitor  and  configure  your 
APC  Symmetra  RM  to  shut  down  and  reboot  your  sys¬ 
tems,  receive  e-mail  alerts  and  view  the  event  log. 


Remote  Monitoring 

APC  monitors  all  UPS  parameters,  tailored  to  your 
desired  response.  Regular  UPS  parameter  and 
event  reports  are  issued  with  event  frequency, 
duration,  and  resolution,  offering  immediate 
enhancements  to  your  investment. 

MasterSwitch™  VM 

Provides  the  ability  to  monitor  the  current 
draw  and  set  alarm  thresholds,  based  on 
customer  requirements,  while  still  providing 
the  remote  on/off/reboot  capabilities  found  in 
the  MasterSwitch  series.  In  addition,  it 
mounts  vertically,  requiring  zero 
U  of  valuable  rack  space. 


Environmental  Monitoring  Card 

Works  with  your  APC  Smart-UPS®or 
Matrix-UPS®  to  monitor  ambient 
temperature,  humidity  and  other 
environmental  conditions. 


PowerChute®  Inventory  Manager 

An  invaluable  software  tool  for  anyone  with  a 
large  number  of  APC  UPSs  spread 
across  a  wide  geographic  area.  Via 
SNMP-enabled  APC  UPSs,  schedule 
the  software  to  gather  information 
from  the  UPSs,  then  select  any  one 
of  the  eleven  predefined  reports. 
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Other  APC  products  for  the 

VolP/Rack  environment: 

•  KVM  Switches  provide  one  centralized  control 
point  for  up  to  64  servers. 

•  ProtectNet  rack-mounted  data-line  protection. 

•  PowerNet  Manager  collects  UPS/power  status 
information  for  fast  problem  diagnosis 

•  Cable  Interface  Kits  provide  direct  communication 
between  UPSs  and  desktops,  workstations  and 
servers. 

•  2-Post  Racks  /  4-Post  Open  Frame  Racks 
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Symmetra  RM  is  easily  manageable  with  the 
industry-leading  network  platforms. 


By  utilizing  AFC's  PowerNet  for  CiscoWor1<s2000,  which 
integrates  ABC's  power 
management  so^are 
with  CiscoWorks2000,  Cisco 
customers  now  can  easily 
manage  APC  power  protection  and  network  power  control 
devices  from  the  same  Web  browser  as  Cisco  equipment 


Cisco  Systems 

Verified 


INFORIunONWEEK 
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APC  was  named  to  the  2000 
InformationWeek  500  ranking  of 
the  top  IT  innovators  (09/1 1/00). 


Legendary  Reliability” 


Enter  to  Win  a  FREE  Spot  Cooler  from  APC  today!  All  entrants  will  receive  a  FREE  Enterprise  Availability  Kit 
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Defrag  Commander. 
Making  other  defraggers 

obsolete. 


Don’t  settle  for  yesterday’s  technology. 
Defrag  Commander  is  the  fastest,  most 
thorough  and  cost-effective  defrag  tool 
around.  It  manages  the  defragmentation  of 
all  your  networked  Windows®  computers 
from  a  single  system,  eliminating  costly 
client  software  installations  and  end-user 
support  headaches.  Move  up  to  the  new 
enterprise  defrag  solution  —  and  you’ll  see 
why  we’re  a  cut  above  the  rest. 


•  Faster  and  more  thorough  defragmentation 

•  Network-wide  defragging  from  a  single  system 

•  No  client  software  installation 

•  Easier  to  install,  manage  and  support 

•  Certified  for  Microsoft  Windows  2000  Server 

•  Costs  a  fraction  of  other  defraggers 


Try  Defrag  Commander  FREE  for  30  days!  Download  it  at  www.winternals.com/33, 
or  call  toU  free  1-800-237-5138  for  more  information  and  enterprise  pricing. 


';2001  \X’intemal5  Software  LP.  All  rights  reserved.  Wintemals  is  a  registered  trademark  of  Wintemals  Software  LP. 
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■  AN  INSIDE  LOOK  AT  THE 
TECHNOLOGIES  AND  STANDARDS 
SHAPING  YOUR  NETWORK 


Multirouters  enable  real  private  nets 


■  BY  MATTHEW  GLENN 

Incremental  changes  have  made  routers 
faster,  denser  and  generally  more  efficient, 
but  their  fundamental  monolithic  architec¬ 
ture,  in  which  one  processor  performs  all 
routing  calculations,  has  not  changed. 

This  has  become  a  serious  bottleneck 
and  design  constraint  when  it  comes  to 
cost-effectively  deploying  and  scaling  new 
broadband  services,  particularly  at  the  net¬ 
work  edge. 

One  possible  solution  is  multirouter  tech¬ 
nology  in  which  a  single  physical  router 
can  be  partitioned  for  multiple  customers. 
Multirouter  technology  provides  complete 
autonomy  isolation  and  control  between 
multiple  routers  operating  within  a  single 
physical  device. 

Conventional  routers  are  architected 
with  a  single  centralized  processor  that 
performs  routing  calculations,  exception 
processing  and  management  of  the 
router.  But  at  the  network  edge,  where 
users  are  aggregated  and  services  ap¬ 
plied,  there’s  an  overwhelming  require¬ 
ment  for  more  route  processing  power. 
Unfortunately,  monolithic  routers  can’t 
effectively  scale  control-plane  processing 
because  of  this  design  limitation. 

Multirouter  technology  allows  the  con¬ 
current  and  independent  operation  of 
individual  routers  and  associated  routing 
protocols  on  separate  routing  engines 
(route  processors  with  dedicated  mem¬ 
ory)  within  a  single  device.  Multirouter 
technology  typically  employs  separate 
and  redundant  multigigabit  data  forward¬ 
ing  and  control-plane  fabrics  to  ensure 
resilience  and  scalability. 


With  multirouter  technology,  each  router 
can  run  its  own  protocols,  policies  and 
security  and  maintain  its  own  separate 
routing  and  forwarding  tables  —  keeping 
the  autonomy  of  each  corporation  or  ser¬ 
vice  provider  intact.  This  is  accomplished 
by  distributing  throughout  the  system  ded¬ 
icated  route  processing,  memory  and  other 
hardware  resources  for  each  router. 


Because  multirouter  technology  distrib¬ 
utes  and  dedicates  multiple  route  process¬ 
ing  engines,  processing  power  scales  lin¬ 
early  as  more  ports  are  added.  Reliability  is 
strengthened  as  a  result  of  the  physical  par¬ 
titioning  of  each  router’s  traffic. 

Multirouter  technology  also  lets  any  port 
be  attached  as  a  dedicated  resource  to  any 
router  within  the  system.  Flexible  port 


assignment  gives  service  providers  the 
option  to  lease  bandwidth,  ports  and 
resources  as  needed,  enabling  better  opti¬ 
mization  of  the  infrastructure  and  the  abil¬ 
ity  to  begin  selling  routing  by  the  port. 

Because  multirouter  technology  enables 
multiple  routing  environments  to  operate 
concurrently  multitiered  management  is 
essential. 


Multitiered  management  provides  dis¬ 
crete  views  and  controls  for  router  owners 
and  customers.  Individual,  discrete  routers 
and  associated  router  resources,  such  as 
memory  bandwidth  and  I/O,  for  each  cus¬ 
tomer  are  provisioned  by  the  carrier. 
Autonomous  control  and  complete  man¬ 
agement  is  handed  over  to  the  router  cus¬ 
tomer,  who  then  configures  and  manages 


the  router  with  the  desired  protocols, 
access  control  lists  and  other  features. 

Multirouter  technology  opens  the  door  to 
important  new  carrier  and  enterprise 
applications,  such  as  optimizing  and  col¬ 
lapsing  the  network  edge,  routing  as  a  ser¬ 
vice  and  the  creation  of  real  private  net¬ 
works  (RPN). 

Because  multirouter  systems  support  the 
concurrent  and  autonomous  operation  of 
multiple  routing  environments,  the  ability 
to  offer  physical  routers  as  a  service  to 
providers  is  now  possible.This  dramatically 
reduces  capital  expense  and  operational 
costs,and  speeds  time  to  market  for  service 
providers. 

For  corporations,  multirouter  technology 
enables  the  creation  of  RPNs.  RPNs  let  car¬ 
riers  give  each  company  its  own  physically 
distinct  routers  and  private  lines  at  cost  lev¬ 
els  comparable  to  virtual  networks. 
Corporations  do  not  have  to  sacrifice  con¬ 
trol,  privacy  or  performance  to  save  money 
Unlike  frame  relay  and  ATM  VPNs,  RPNs  are 
fully  routed  networks  with  all  the  flexibility 
and  connectivity  of  IP 

Using  RPNs,  multiple  corporations  can 
flexibly  purchase  bandwidth  by  the  port 
(as  necessary)  and  use  a  single  carrier 
backbone  as  if  it  were  their  own  private 
backbone  without  the  costs  associated 
with  building  a  backbone. 

With  multirouter  technology  companies 
can  rethink  the  fundamental  role  and  use 
of  the  router  in  their  networks  to  save  time 
and  money 

Glenn  is  a  co-founder  of  Allegro  Networks. 
He  can  be  reached  at  matt@allegronet 
works.com. 
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Multirouter  technology  could  enable  customers  to  build 
private  networks  consisting  of  partitioned  space  on 
multiple,  distributed  routers. 
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O  A  customer  leases  a  router  within  a  multirouter 
system  from  a  carrier  and  can  then  configure 
his  own  security,  policies  and  protocols. 
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Dr.  Internet 


By  Steve  Blass 


My  company  is  moving  from  a  peerto-peer  net¬ 
work  to  a  Wndows  2000  Small  Business  Server 
domain  network.  We  have  to  travel  back  and 
forth  from  each  location  with  a  Windows  98  lap¬ 
top.  Is  there  an  easier  way,  like  a  batch  file,  that 
would  reset  the  network  settings  back  and  forth 
to  accommodate  each  style  of  network?  The 
transition  won't  be  completed  for  a  few  months. 

Windows  controls  the  network  parameters  you 
want  to  automatically  change  through  the  registry. 


The  registry  stores  values  by  key  names.  The  easi¬ 
est  tool  for  reading  and  writing  registry  keys  and 
values  is  regedit.  First,  back  up  your  system,  then 
you  can  back  up  the  registry.  From  the  start 
menu,  choose  run  and  type  “regedit"  in  the  dialog 
box  and  press  enter.  Inside  regedit,  choose  the 
command  "Export  Registry  File"  from  the  Registry 
menu.  The  registry  file  will  be  saved  with  a  .reg  file 
extension  by  default.  You  can  reload  these  settings 
later  with  the  “Import  Registry  File"  command. 
Double  clicking  a  *.reg  file  in  Win  98  loads  the  reg¬ 


istry  settings  from  that  file.  Create  a  registry  file 
for  each  configuration,  and  you  can  load  the  set¬ 
tings  by  double-clicking.  Do  not  reload  the  entire 
registry  each  time.  Use  a  tool  such  as  Windiff 
from  your  Win  98  CD  or  CSDiff  from  the  'Net  to 
identify  keys  that  change  between  environments 
and  create  reg  files  that  contain  those  values. 

Blass  is  a  network  architect  at  Change@Work  in 
Houston.  Send  Internet  and  network-related  ques¬ 
tions  to  him  at  dr.internet@changeativork.com. 
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Technology  Update 


GEARHEAD 
INSIDE  THE 
NETWORK 
MACHINE 

Mark 

Gibbs 


Last  week  we  delved  into  Proxomitron, 
an  excellent  (and  free)  HTTP  proxy 
designed  to  automagicly  edit  incom¬ 
ing  content  on  the  fly  to  remove  things  such 
as  pop-ups,  pop-unders  and  nosey  Java¬ 
Script.  We  discussed  Proxomitron’s  search 
and  replace  specifications  and  how  they 
are  used,  and  this  week  we’ll  discuss  how 
Proxomitron  revealed  other  software  doing 
things  we  could  live  without. 

One  of  the  neat  features  of  Proxomitron  is 
an  HTTP  message  logger.  This  is  launched 
from  Proxomitron’s  main  window,  which  is 
accessed  from  the  system  tray 
The  logger  displays  the  headers  of  HTTP 
requests  and  responses  proxied  by 
Proxomitron,  and  for  each  response  lists 
the  rules  that  are  applied  to  the  content. 
Oddly,  we  noticed  that  every  few  minutes, 
the  Proxomitron  logger  would  show  HTTP 
exchanges  between  our  PC  and  a  couple 
of  Web  sites. 

This  is  what  we  saw  in  the  logger  for  a 
request  to  one  of  the  mysterious  sites: 


Proxomitron  poses  problem 


GET /un?2 1302 12  HTTP/ 1.0 
Accept:  */* 

PEABODY-VER:  1.4 
PEABODY-SWVER:2.0 
PEABODY-OS:WIN 
PEABODY-OSVER:  4. 1 0. 1 998 
PEABODY-UID:  E50486C2A46C11D59733 
00A0CC231387 
PEABODY-LASTUPDATED:  1 1 
PEABODY-UNINSTALL:  1 
User-Agent: SpaceBison/0.01  [fu]  (Win67; 
X;SK) 

Host:  psl.streamingcash.com 
Pragma:  no-cache 

In  the  above  case,  the  target  site  is 
“psl.streamingcash.com” and  the  GET  re¬ 
quest  is  “/un?2130212.”  (The  User-Agent 
header  string  “SpaceBison”  is  the  ID  of 
Proxomitron  and,  no,  we  have  no  idea 
why) 

When  we  browsed  the  sites  —  psl. 
streamingcash.com  and  bis.l80solutions. 
com  —  we  found  nothing  intelligible. The 
chase  was  on. 

To  make  a  long  story  short,  it  came  down 
to  spyware  —  a  topic  we  discussed  some 
weeks  ago  (www.nwfusion.com,  Doc- 
Finder:  6228).  The  streaming  cash.com 
access  is  the  action  of  a  piece  of  spyware 
called  SVAPlayer  from  QuickFlicks.  We 
installed  this  software  when  we  were 
checking  out  another  application  called 


WeatherBug.  SVAPlayer,  which  delivers 
headlines  and  other  “stuff,”  was  an  installa¬ 
tion  option.  Little  did  we  realize  that 
SVAPlayer  would  be  so  impolite. 

The  other  Web  site  that  was  being  devi¬ 
ously  accessed  —  bis.180solutions.com 
—  is  the  goal  of  a  nasty  piece  of  software 
called  msbb.exe  (which,  despite  what  you 
might  assume,  has  nothing  to  do  with 
Microsoft  —  it  is  apparently  from  a  com¬ 
pany  called  Web3000  at  www.web 
3000.com). 

Msbb.exe  seems  to  live  (at  least  on  our 
system)  in  the  subdirectory  “c:/program 
files/n-case.”  We  were  gifted  this  piece  of 
spyware  by  installing  a  screensaver  called 
“Fireworks”  that  we  downloaded  from  Galt 
Technology 

This  swinish  software  records  all  the 
URLs  you  request  for,  we  believe,  the  previ¬ 
ous  24  hours  and  stores  them  in  a  file 
called “fizl”which,we  further  believe, is  reg¬ 
ularly  uploaded  to  the  target  server. 

Worst  of  all,  we  are  even  further  led  to 
believe  that  msbb.exe  will  hang  on  to 
your  PC  with  the  tenacity  of  a  terrier  wor¬ 
rying  a  bone.  Not  only  are  there  registry 
entries  that  try  to  start  the  program  at 
bootup  but  we  have  also  read  that  there  is 
a  helper  application  that  attempts  to  re¬ 
place  msbb.exe  and  its  registry  entries  if 
you  should  delete  them.  Any  information 


www.nwfusion.com 


you  may  have  on  this  topic  would  be 
most  welcome. 

Anyway  it  turns  out  that  the  Lavasoft  Ad- 
Aware  spyware  blocking  system  (www 
nwfusion.com,  DocFinder:  6229)  rather  dis¬ 
appointingly  can’t  detect  either  of  these 
versions  of  spyware.  We  finally  got  rid  of 
SVAPlayer  by  deleting  everything  associat¬ 
ed  with  it  (interestingly,  despite  having 
deleted  its  companion,  Weatherbug,  there 
was  still  a  registry  entry  to  run  one  of 
Weatherbug’s  background  processes  that 
wasn’t  removed). 

A  similar  exercise  was  required  to  get  rid 
of  msbb.exe.  To  find  all  of  the  registry  en¬ 
tries  that  run  the  components  of  these  vile 
pieces  of  software,  we  recommend  an 
excellent,  neat  and  free  utility  called 
Startup  Control  Panel  by  Mike  Lin  (see 
www.mlin.net/StartupCPL.shtml  and  check 
out  his  StartupMonitor  —  www.mlin. 
net/StartupMonitor.shtml  —  a  tool  that 
monitors  and  manages  applications  that 
try  to  install  themselves  to  run  at  startup). 

So  the  moral  is  start  checking  your  net¬ 
works  now  to  see  how  much  spyware  is 
running  and  how  it  got  installed.  And  let  us 
know  what  you  find  —  we  will  treat  your 
revelations  with  the  utmost  secrecy 

Next  week,  we’ll  wrap  up  Proxomitron. 
Honest.  Diversions  to  gearhead@gibbs.  com. 


Cool 


A  roundup  of  the 
latest  neat  stuff 


Almost  everyone  in  the  PDA  world  is 
gearing  up  for  the  holidays  by  rolling 
out  new  models.  Here’s  a  rundown  on 
PDAs  from  Sony  Handspring  and  Palm. 

Palm  debuts  m125 

Think  of  Palm’s  ml25  model  as  an 
update  to  the  entry-level  ml 00  series  that 
Palm  launched  this  year,  but  with  more 
features.The  ml 25  includes 
the  extra  expan¬ 
sion  slot 
that  Palm  , 
intro-  ^ 


m125 


duced  in  its  m500  series,  where  you  can 
use  a  MultiMediaCard  or  a  Secure  Digital 
card  to  add  things  such  as  extra  memory 
and  games. The  ml25  sells  for  about  $250 
and  is  available  now. The  ml 25  runs  on  a 
Dragonball  VZ  33-MHz  processor,  operates 
on  two  triple-A  batteries,  has  8M  bytes  of 
RAM  and  includes  Version  4.0  of  Palm  OS. 

The  bundled  software  includes  nine 
applications,  including  DataViz’s  Docu¬ 
ments  To  Go  (view  and  edit  Word  and 
Excel  documents),  PocketMirror  (syn¬ 
chronize  with  Outlook),  Palm  Reader 
(eBook  reader).  Palm  Mobile  Con¬ 
nectivity  Kit  (connect  wirelessly  to  an 
Internet  account  via  a  mobile  phone  or 
modem)  and  AvantGo  Mobile  Internet 
Service,  among  others. 

For  users  who  care  about  style.  Palm 
offers  19  different  face  plates  to  customize 
the  look  of  the  device.  Go  to  www. 
palm.com/products/palmml25  for  more 
information. 

More  PaImPaks  available 

Palm  is  also  introducing  five  Palm- 
Pak  cards.  Secure  Digital  cards  that 
will  work  with  the  ml25,  m500  and 
m505  models.  They  are: 

•  PalmPak  Travel  Card: 
RandMcNally  Road  Atlas  gives  users 
maps,  driving  directions  and  points 
of  interest  in  the  continental  US. 

•  PalmPak  Language  Translator:  lets 
users  translate  English,  French,  Italian, 
German  and  Spanish  phrases. 

•  Ftersonal  Finance  Series  eBook:  seven 
personal  finance  books. 


•  Mystery  Book  Series:  six  books  by 
Michael  Connelly 

•  Science  Fiction:  one  trilogy  and  seven 
stories  by  Peter  Hamilton. 

The  PaImPaks  range  in  price  from  $30  to 
$40  and  should  be  available  in  November 
from  Palm’s  Web  site. 

Sony  updates  Clie  PDA 

Sony  announced  that  its  new 
Clie  N760C  would  be  available  in 
October  for  around  $500.  The 
N760C  includes  the  Palm  OS 
Version  4.1,  compatibility  with 
Microsoft’s  new  Windows  XP  oper¬ 
ating  system, a  screen  that  displays 
more  than  65,000  colors,  and  a 
built-in  digital  audio  player.  The 
device  has  8M  bytes  of  RAM  and  can 
play  native  MP3  and  encoded  ATRAC3 
audio  files.  It  can  also  read  the  audio 
files  directly  from  a  Memory  Stick  (8M 
bytes  included). 

The  device  runs  on  a  Dragonball  VZ  33- 
MHz  processor,  includes  a  jog  dial  (for 
one-handed  navigation),  has  a  Universal 
Serial  Bus  cradle,  runs  on  a  lithium  ion 
rechargeable  battery  and  weighs  about 
5.65  ounces.  With  a  Memory  Stick  you 
can  also  install  Palm  OS-based  applica¬ 
tions  directly  instead  of  performing  a 
HotSync. 

For  users  of  the  nonaudio  Clie  models, 
Sony  also  launched  the  PEGA-SA500 
MP3  module,  which  will  cost  about 
$130.  The  module  enables  MP3  play¬ 
back  on  the  N610C,S320  and  S300  hand¬ 
helds,  by  connecting  to  the  serial  port  of 


those  devices. 

For  more  information,  go  to  www. 
sonycom/clie. 

Two  new  Handspring  Visor  models 

Handspring  recently  launched  two 
models  to  its  PDA  line. 
The  $300  Visor  Pro  has 
16M  bytes  of  RAM, 
twice  that  of  other 
Palm  OS-based  PDAs. 
The  Visor  Pro  also 
includes  a  lithium  ion 
rechargeable  battery 
and  a  new  silent  alarm 
feature  with  a  blinking 
LED  instead  of  an  audi¬ 
ble  alarm. 

Handspring  also  intro¬ 
duced  its  entry-level 
model,  the  Visor  Neo,with  a  faster  proces¬ 
sor  than  the  Visor  Deluxe.  The  Visor  Neo 
costs  $200,  includes  8M  bytes  of  RAM  and 
runs  on  three  triple-A  batteries. 

Both  models  use  the  Motorola  Dragon¬ 
ball  VZ  processor  and  have  mono¬ 
chrome  screens  with  16  shades  of  gray. 
They  have  the  Springboard  expansion 
slot  found  on  all  Handspring  models 
and  the  Fast  Lookup  feature,so  users  can 
check  contact  information  more  quickly 
with  one  hand. 

Go  to  www.handspring.com  for  more  fea¬ 
tures  and  details  of  the  new  models. 

Shaw  is  reviews  editor  at  Network  World. 
Send  news  of  cool  tools  to  kshaw@ 
nww.com. 
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provisioning  intervals,  bandwidth 


scalability  and  data 
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MANAGEABILITY  DEFINED 
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Oracle 


Lotus 


systems  management  products,  such  as  Tivoli  and 


Micromuse,  can  all  be  managed  through  Windows, ^ 
Managing  your  enterprise  has  never  been  easier,  ,  <: 
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As  Microsoft’s  premier  Independent  Software 


Vendor  (ISV)  for  MOM  2000,  NetlQ  offers  the  ultk 
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Micromuse 


Anti-Virus 


Novell 


■-  Server  Hardware 


Windows  NT  4 


Web  Services 


With  Microsoft  Operations  Manager  2000  (MOM 
2000),  you  can  now  manage  more  Windows 
applications  from  a  centralized  console.  Simply 
put,  MOM  2000  makes  Windows  the  easiest 
platform  in  the  world  to  manage. 


NetlQ's  Extended  Management  Packs  (XMP)  for 
MOM  2000  extend  and  enhance  your  management 
capabilities  across  your  entire  heterogeneous 
environment  from  the  same  Windows  console.  So 
now,  large-scale  enterprise  platforms  like  Unix, 
NetWare,  Oracle,  Lotus,  and  even  third-party 
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EDITORIAL 

John  Dix 

Stage  set  for 
Stor^e 
Smackdown 

We  invited  five  heavyweight  storage  players  into  the 
ring  to  participate  in  Network  World's  Enterprise 
Storage  Smackdown  at  Comdex  in  November,  and 
all  five  have  happily  donned  their  leopard  skins. 

To  refresh  your  memory,  this  smackdown  is  a  playoff  of 
the  showdowns  Network  World  has  staged  at  many  indus¬ 
try  conferences. We  pick  a  topic,  challenge  specific  ven¬ 
dors  to  participate  based  on  their  market  position  and 
potential  to  influence  change,  and  then  have  at  it  in  a 
frank,  presidential-style  debate. 

The  wrestling  metaphor  seemed  appropriate  for  this  par¬ 
ticular  showdown  because  of  the  size  of  the  players,  the 
often  cantankerous  back  and  forth  about  which  storage 
approach  is  best,  and  the  enormity  of  the  storage  prob¬ 
lem/opportunity  for  you,  the  folks  that  buy  this  stuff. 

Duking  it  out ...  I  mean,  discussing  the  relative  merits  of 
the  various  approaches  will  be: 

•  Jim  Rothnie, senior  vice  president  and  CTO  of  EMC. 

•  David  Hitz,  founder  and  executive  vice  president  of 
engineering  at  Network  Appliance. 

•  Brian  Truskowski,  IBM’s  vice  president  of  technology 
and  strategy  storage  systems. 

•  Jay  Kidd,  vice  president  of  product  marketing  at 
Brocade. 

•  John  Maxwell,  vice  president  of  product  marketing  at 
Veritas. 

My  co-host  for  the  event  is  John  McArthur,  group  vice 
president  of  storage  research  at  IDC.We’ll  open  things  up 
by  giving  each  vendor  2  minutes  to  spell  out  its  basic  posi- 
tion.Then  McArthur  and  1  will  spend  20  minutes  posing 
questions  to  the  group,  followed  by  20  minutes  in  which 
the  vendors  will  grill  each  other. The  time  remaining  will 
be  used  to  field  questions  from  the  audience. 

Obviously  this  will  be  off-the-cuff  stuff. There  are  no 
FbwerFbint  presentations,  no  practice  sessions,  no  scripts. 
The  vendors  have  to  come  prepared  to  justify  their  posi¬ 
tions  and,  even  more  interesting,  deflect  barbs  from  com¬ 
petitors.  It  always  makes  for  interesting  and  lively  debate. 

Topics  will  include  everything  from  iSCSI’s  role  in  the 
enterprise  to  where  network-attached  storage  fits  in  and 
the  promise  of  virtualization. 

And  this  is  where  you  come  in.  Besides  coming  to  the 
event  to  share  and  participate  in  the  fun,  send  in  your 
questions  and  ideas  beforehand  so  McArthur  and  I  can 
speak  for  you. 

The  Enterprise  Storage  Smackdown  at  Comdex  Las  Vegas 
will  be  from  4  to  5  p.m.  Wednesday,  Nov.  14,  in  the  Las  Vegas 
Hilton,  Ballroom  C.  Hope  to  see  you  there  and  hear  from 
you  before  that. 

—  John  Dix 
Editor  in  chief 
Jdix@nww.  com 
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opinions 


One  size  doesn't  fit  all 

Regarding  the  Technology  Insider  on  voice  over  IP 
(www.nwfusion.com,  DocFinder:  6234):  I  think 
Miercom  did  an  excellent  job  in  identifying  key 
issues  with  voice  over  IP  and  reporting  the  research 
findings  in  this  very  ambitious  survey 

1  also  think  that  there  is  an  inherent  weakness  with 
any  approach  that  tries  to  combine  too  many  types 
of  vendor  solutions  into  a  “one  size  fits  all’’  remedy 
Sorting  the  results  between  enterprise  and  carrier 
solutions,  IP  PBXs  and  gateways  might  have  been 
even  more  illuminating. 

One  of  the  key  challenges  facing  voice  over  IP  may 
not  even  be  technology  or  standards;  it  may  be  the 
sheer  amount  of  confusion  often  caused  by  lump¬ 
ing  together  all  solutions  using  voice-over-IP  tech¬ 
nology  from  carrier  to  enterprise,  gateway  to  IP  PBX. 
The  net  result  is  sometimes  an  all-encompassing  yet 
amorphous  category  that  perhaps  defies  anyone’s 
effective  understanding  of  what  works,  what  doesn’t 
and  whether  or  not  the  technology  is  ready 

Greg  Ness 

Director,  marketing  communications 
Shoreline  Communications 
Sunnyvale,  Calif. 

PC  ignorance  is  not  bliss 

Regarding  Mark  Gibbs’  Backspin  column  “PC  igno¬ 
rance  —  a  big  mistake”  (www.nwfusion.com, 
DocFinder:  6235):  You  can  operate  an  automobile 
without  becoming  an  automotive  engineer.  A  house¬ 
wife  trying  to  order  a  widget  from  an  online  retailer 
shouldn’t  need  a  computer  science  degree,  and  a 
secretary  trying  to  type  a  letter  in  Word  shouldn’t 
need  MCSE  certification. 

Years  ago,  I  heard  that  when  people  complained 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 1 8  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  aerification. 


about  the  reliability  ofYugo  automobiles,  someone 
from  the  factory  was  quoted  as  saying  that  if  people 
couldn’t  fix  them  when  they  broke  down,  they  didn’t 
deserve  to  have  cars.There  you  have  it:  The  PC  is  the 
Yugo  of  computers. 

Roger  Philipps 
IS/telecommunications  manager 
Southwestern  Battery  Supply  Co. 

Garland,Texas 

I  enjoyed  Mark  Gibbs’  column  “PC  ignorance  —  a 
big  mistake.”However,  as  the  person  many  of  my 
friends  and  relatives  call  on  for  help  when  they  have 
PC  problems,  I  have  noticed  a  few  things. 

First,  the  Internet  is  a  jungle  fraught  with  all  kinds 
of  danger — viruses,scams,spam,cookies  and  so  on 
—  but  this  is  not  apparent  to  the  average  user. 
Second,  PC  operating  systems,  e-mail  systems  and 
browsers  seem  to  have  been  written  by  geeks  for  use 
by  other  geeks.Third,  most  adults  do  not  understand 
that  they  cannot  break  their  PCs.  When  things  go 
wrong,  they  can  easily  reboot  but  seem  to  be  afraid 
to.This  inhibits  adults  from  “playing”  with  the  PC  and 
thus  learning  how  to  operate  it  better. 

Norm  Auspitz 

Louisville,  Ky 

Hopeless  hodgepodge 

Regarding  “  ‘Parasitic  grid’  wireless  movement  may 
hurt  carriers”  (www.nwfusion.com,  DocFinder: 
6236):  I  find  it  amusing  that  you  would  assert  that  a 
hodgepodge  of  do-it-yourselfers  putting  together  a 
wireless  infrastructure  would  take  business  away 
from  any  structured,  organized  wireless  infrastruc¬ 
ture  effort.  Remember  how  VPNs  were  going  to  kill 
the  carriers?  Last  I  checked,  we’re  all  still  depen¬ 
dent  on  true  leased  lines  with  service-level  agree¬ 
ments  to  ensure  the  reliability  that  we  need. 

Phil  Clemens 

Rochester,  Ill. 
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STATE  OF  THE  WAN 

Jim  Metzler 


The  new  low-cost  enterprise  WAN 


A  year  ago,  the  enterprise  WAN  was  under  great  pressure.  Many 
companies  felt  that  if  they  did  not  quickly  extend  their  WANs  to 
a  range  of  customers, suppliers  and  distributors,  they  would  be  at 
a  severe  competitive  disadvantage.  Today,  the  enterprise  WAN  is  still 
under  great  pressure,  but  of  a  different  kind.  Network  World’s  State  of 
the  WAN  tour  will  explore  these  changing  pres¬ 
sures,  and  suggest  products  and  services  com¬ 
panies  can  implement  to  respond  to  them. 

While  companies  still  feel  the  need  to  extend 
their  WAN  infrastructures  to  stay  competitive, 
the  urgency  of  that  requirement  has  somewhat 
subsided.  Today,  enterprise  managers  are  feel¬ 
ing  pressured  to  redesign  their  WAN  infrastructures  primarily  to  save 
money  However,  the  unstoppable  force  that  is  the  corporate  mandate 
to  make  fundamental  changes  in  the  WAN  is  running  into  an  immov¬ 
able  object:  severe  budget  and  personnel  constraints. 

In  terms  of  enterprise  WAN  technologies,  most  enterprise  network 
departments  are  not  excited  about  making  major  new  deployments  of 
frame  relay  or  ATM  because  of  their  cost  structure  and  relative  lack  of 
flexibility  However,  many  companies  are  interested  in  making  at  least 
a  modest  deployment  of  newer  technologies,  such  as  voice  over  IP 
and  IP-based  VPNs. 

Over  time,  voice  over  IP  will  offer  most  companies  significant  bene¬ 
fits,  including  the  ability  to  more  easily  deploy  new  applications  and 
run  a  more  streamlined,  integrated  network  organization.  Un¬ 
fortunately,  many  firms  considering  voice  over  IP  are  motivated  pri¬ 


marily  to  cut  cost.  While  saving  money  is  a  possibility  any  network  pro¬ 
fessional  looking  at  voice  over  IP  purely  to  save  money  needs  to  do  a 
careful  analysis  of  the  potential  savings. 

I  am  extremely  bullish  on  the  use  of  dial-up  IP  VPNs  to  support  re¬ 
mote-access  requirements.  In  particular,  it’s  common  for  companies  to 
spend  $4  or  $5  per  hour  to  support  remote 
workers  via  toll-free  numbers  or  the  public 
switched  telephone  network.  In  most  cases,  a 
dial-up  IP  VPN  will  lower  these  costs  to  about 
$1  per  hour. 

Site-to-site  IP  VPNs  are  more  problematic.  A 
year  ago,  many  companies  were  looking  at 
site-to-site  IP  VPNs,  given  the  mandate  to  rapidly  extend  their  WAN 
infrastructures  to  customers,  suppliers  and  distributors.  However, 
because  site-to-site  VPNs  are  not  always  the  low-cost  solution,  many  of 
these  companies  are  taking  a  second  look  at  that  strategy 

Given  the  current  pressure  to  cut  costs  in  the  WAN,  the  best  strategy 
is  to  use  the  most  cost-effective  technology  from  the  most  appropriate 
vendor, in  each  part  of  the  network.  But  implementing  that  strategy  will 
put  tremendous  pressure  on  the  network  department  to  better  man¬ 
age  a  range  of  technologies  and  service  providers. 

For  more  on  this  issue,  join  me  on  Network  World’s  State  of  the  WAN 
seminar  tour.  Head  to  www.nwfusion.com,  DocFinder:  6226,  to  register. 

Metzler  is  vice  president  of  Ashton,  Metzler  £  Associates,  a  consultancy 
in  Newton,  Mass.  He  can  be  reached  at  jim@ashtonmetzler.com. 


Today,  enterprise 
managers  are 
feeling  pressured 
to  redesign  their 
WAN  infrastruc¬ 
tures  primarily 
to  save  money. 


OH  SECURITY 

Winn  Schwartau 

Everything  has  changed.  American  air¬ 
ports  will  soon  resemble  armed  camps 
—  and  we  won’t  mind. Law  enforcement 
will  make  more  requests  of  ISPs  to  monitor 
traffic,  and  we  won’t  mind  nearly  as  much  as 
we  did  before.  Our  goal  posts  of  differing  opin¬ 
ions  are  moving  closer  together,  toward  com¬ 
mon  beliefs,  needs  and  realities. 

We  learn  from  our  mistakes  and  failures,  and  we  have  to  reevaluate 
what  we  think  we  know  about  security 
Information  security  does  not  exist  in  a  bubble.  It  is  an  integral  part  of 
any  protection  program  —  commercial,  infrastmcture  or  government. 

Identification  cards  are  not  proof-positive,  and  the  fallacy  of  pass¬ 
words  screams  for  their  eradication.  Biometric  identification  will 
become  an  increased  part  of  strong  network  authentication. 

Companies  will  pay  more  attention  to  security  vulnerabilities  and 
spend  the  effort  to  repair  them  before  something  goes  wrong. 
Management  will  give  technical  staffs  additional  tools  to  ensure  their 
networks  are  secure  and  don’t  simply  meet  minimal  standards. 

Physical  security  is  integral  to  a  comprehensive  protection  plan. 
Doors  and  locks  are  as  important  to  the  security  of  rooms  full  of  com¬ 
puters  as  are  proper  network  user  identification  and  authentication. 

Physical  security  and  information  security  staffs  will  work  much  more 
closely  together.  We  are  all  becoming  aware  of  the  bigger  picture  and 
will  focus  less  on  the  corporate  fiefdom  conflicts  that  have  dominated. 

Disaster  recovery  is  a  lot  more  than  back-up  tapes  down  the  hall.  It’s 
all  about  time;  How  long  can  a  company  be  without  mission-critical 
data,  and  how  often  should  it  update  back-up  systems?  Back-up  plans 
will  be  more  comprehensive  and  tested  more  regularly  than  before. 

Job  applicants  will  be  more  understanding  when  potential  em¬ 
ployers  want  to  dig  a  little  deeper  into  their  backgrounds.They  will  also 
understand  and  tolerate  increased  reasonable  company  monitoring  of 
online  activities. 

Management  will  help  employees  understand  the  bigger  picture  and 
make  them  part  of  the  solution,  while  avoiding  Draconian  measures 


A  security  catharsis 


that  alienate  the  people  whose  cooperation  is  needed.  More  security 
measures  will  be  introduced  at  the  desktop,  at  servers  and  throughout 
the  enterprise,  but  management  will  go  the  extra  mile  to  avoid  abuse. 

Human  resources  will  no  longer  look  at  technical  types  as  unman¬ 
ageable  geeks.  Technical  staff  are  integral  to  successful  and  secure 
operations,  but  companies  will  become  more  sensitive  as  to  who  are 
the  “right”  people.  HR  will  become  part  of  the  security  process  in  hiring, 
interviewing,  employee  monitoring  and  proper  termination  methods. 

Companies  will  connect  to  other  companies,  people  and  systems 
with  increased  care  and  vigilance  —  after  they  disconnect  those  sus¬ 
pected  weak,  internetworked  connections. 

Practicing  cyberdisasters  at  the  corporate,  civil  and  national  levels  is 
a  worthwhile  investment  in  security  awareness  for  staff  and  citizens. 
Companies  will  increase  security  training  and  awareness  through  sim¬ 
ulations  and  contingency  management  exercises  to  get  staffs  to  under¬ 
stand  the  repercussions  of  failed  network  security  practices. 

All  national  events,  physical  or  cyber,  start  at  the  local  level,  and  the 
civic  emergency  services  receive  the  first  calls  for  help.l’his  reality  will 
become  more  accepted  as  organizations  focus  their  attention  on  high¬ 
speed  response  to  detected  security-relevant  events. 

No  longer  will  the  specter  of  cyberterrorism  be  so  easily  dismissed. 
We  really  do  not  need  to  understand  the  motivations  of  potential 
online  adversaries;  we  only  need  to  understand  their  capabilities  and 
prepare  as  best  we  can  for  unknown  future  electronic  assaults. 

The  information  security  mantra  “We’re  all  in  this  together”  has  never 
been  more  true.  None  of  us  can  go  this  alone.  Private  and  government 
distmst  is  quickly  being  replaced  by  a  common  goal  and  common 
defense. Security  awareness  will  spread  from  the  IT  community  to  man¬ 
agement  as  never  before,  and  we  will  finally  get  the  “folks  at  home”  to 
understand  how  critical  security  is  —  for  all  of  us. 

Schwartau  is  president  of  Interpact,  a  security  awareness  consulting 
firm  (www.security-aware.com)  and  author  of  many  books,  including 
Cybershock  and  Computer  and  Internet  Ethics.  He  can  be  reached  at 
winns@gte.net. 
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Data  drives 
your  business. 


drives  your  data. 

VERITAS.  The  software  that  fuels  storage. 
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Register  today  for  VERITAS  VISION  '2001 
at  veritasvision.com 
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Ask  people  to 

imagine  what 
enterprise  net¬ 
works  will  look 

like  in  the  future  and  they  gener¬ 
ally  laugh.  Most  are  too  busy  wor¬ 
rying  about  how  they’re  going  to 
get  through  next  week  to  wonder 
about  the  technology  landscape 
down  the  road. 

But  those  who  don’t  have  to 
worry  about  keeping  networks 
humming  day  to  day  can  afford 
to  kill  some  time  with  such  mus- 
ings.We  managed  to  pin  down  a 
few  people  for  their  thoughts  on 
five  developments  and  issues  that 
will  shape  the  future:  the  band¬ 
width  boom;  wireless;  hackers 
and  IT  disasters;  outsourcing;  and 
the  breaking  of  Moore’s  Law. 
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If  you're  doing 
some  long- 
range  planning, 
here  are  five 
developments 
that  will  shape 
networking  for 
years  to  come. 


BY  PAUL  DESMOND  ! 

!  J 


Demand  for  dedicated  bandwidth  will 
increase  at  a  compound  annual  growth  rate  of  32% 
from  1998  through  next  year,  according  to  consultancy 
Vertical  Systems  Group. Vendors  of  all  stripes  are  rush¬ 
ing  to  meet  the  demand,  whether  by  laying  fiber, 
launching  satellites  or  squeezing  more  bandwidth  out 
of  existing  networks. 

The  bandwidth  boom  shows  no  sign  of  abating. 
Recently,  Cable  &  Wireless  and  Alcatel  announced  they 
were  building  an  all-lP  transatlantic  cable  that  would 
boost  capacity  by  more  than  one-third  vs.  current 
cables.  Lucent  also  announced  Time  Warner  was  buy¬ 
ing  an  optical  network  system  that  uses  dense  wave 
division  multiplexing  and  new  amplifier  technology  to 
double  the  capacity  of  existing  fiber. 

At  the  same  time,  satellites  slated  to  be  operational 
within  the  next  three  years  will  be  capable  of  download¬ 
ing  IP  traffic  at  lOOM  bit/sec,  with  uplinks  of  2M  bit/sec, 
offering  yet  another  alternative  for  “last-mile”  connectivity. 

As  broadband  fully  unfolds  in  the  consumer  market, 
“it  will  substantially  redefine  the  way  that  enterprises 


lilt’s  the  long-promised,  never- 
delivered  collaborative  computing 
paradigm,  with  people  working  on 
the  same  document  interactively.  9  9 


Russ  McGuire 

chief  strategist,  TeleChoice 

work  and  the  way  that  they  are  integrated  into  society 
says  Sandy  Fraser,  director  of  AT&T  Labs  Research. “It  is 
a  much  more  dynamic  world  when  communication 
paths  rather  than  collocation  substantiates  the  relation¬ 
ship  between  an  enterprise  and  its  employees.” 

The  result  will  be  companies  that  are  far  more  distrib¬ 
uted.  Russ  McGuire,  chief  strategist  with  the  consultancy 
TeleChoice  (a  highly  distributed  organization),  expects 
applications  that  he  uses  routinely  today  to  communi¬ 
cate  with  colleagues,  such  as  instant  messaging,  will 
grow  to  include  video  and  other  capabilities  that  take 
advantage  of  high-speed  connections.“lt’s  the  long- 
promised,  never-delivered  collaborative  computing  par 
adigm,with  people  working  on  the  same  document 
interactively  he  says. 
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Wildabout 

wireless 


Increasing  amounts  of  bandwidth  contributing  to 
the  boom  will  be  delivered  sans  wires. 

Shipments  of  wireless  Internet  access  devices,  after 
experiencing  double-  and  triple-digit  growth  through 
2004,  will  eventually  replace  the  PC  as  the  preferred 
Internet  access  method,  according  to  market 
researchers  Cahners  In-Stat  Group. 

The  speed  of  such  links  is  likely  to  increase  dramatically 
in  coming  years,  given  improvements  in  satellite  communi¬ 
cations  and  other  developments. The  journal  Nature  re¬ 
cently  published  a  stor>'  by  researchers  who  claim  they 
determined  how  to  squeeze  three  wireless  channels  out  of 
a  frequency  that  previously  supported  only  one,  at  least  in 
crowded  urban  areas  and  within  buildings. That  would 
triple  the  capacity  of  wireless  links  while  improving  quality 
“In  15  years  we  will  see  the  difference  between  wired 
and  wireline  disappear  entirely  as  wireless  connections 
become  more  broadband  and  more  reliable,”  says  James 
Kobielus,an  analyst  with  The  Burton  Group  and  a  Network 
World  columnist.  He  envisions  salespeople  surfing  the  Web 
from  the  back  seat  of  a  taxi  for  last-minute  background 
data  while  on  the  way  to  visit  a  potential  cus- 
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I  lln  1 5  years  we  will  see  the  difTerence 
between  wired  and  wireiine  disappear 
entirely  as  wireless  connections  become 
more  broadband  and  more  reliabie.19 

James  Kobielus 

analyst, The  Burton  Group 

tomer.  He  expects  we  could  also  see  advanced  telemedi¬ 
cine  applications,  such  as  wireless-enabled  monitors  built 
into  wristwatches  that  can  alert  healthcare  professionals  of 
dangerous  vital  signs  for  at-risk  patients. 

Ken  Hyers,  senior  analyst  for  mobile  commerce  at  In- 
Stat,  expects  the  availability  of  ultra-wideband  services 
in  five  to  seven  years  will  enable  easier  access  from 
portable  devices  to  corporate  databases,  including  full- 
color  images  and  video.  Salespeople  will  be  able  to 
instantly  check  inventory  while  sitting  with  a  customer. 
Insurance  adjusters  will  collect  data  and  video  at  the 
site  of  a  disaster  and  transmit  it  back  to  the  home  office 
for  faster  processing. 

“It’s  going  to  be  the  enterprise  that’s  going  to  drive  a  lot 
of  these  early  applications  because  they  have  the  need 
and  the  resources  to  pay  for  it,”  Hyers  says. 


Tlie  downside  to  wireless  and  broadband  to 
the  home  is  that  it  makes  life  easier  for  hackers, 
who  don’t  need  any  help. 

“Employee-owned  PCs,  Palms  and  cell 
phones  being  used  to  tie  into  work  systems  really 
changes  the  security  model,”  says  John  Pescatore,a 
research  director  at  Gartner.  Fixing  it  will  mean 
embedding  firewalls  and  other  security  tools  into  ^ 
home  network  hardware  components  such  as  PC 
cards  and,  increasingly,  hubs  and  routers. 

Eugene  Spafford,  director  of  the  Center  for  Education 
and  Research  in  Information  Assurance  and  Security  at 
Purdue  University,  was  part  of  a  “security  visionary  round 
table”  assembled  last  September  by  CERIAS  and  Accen¬ 
ture  (formerly  Andersen  Consulting). The  participants 
came  up  with  a  list  of  top  10  trends  affecting  security 
and  issued  a  ’’call  to  action”  paper  that  outlined  steps 
required  to  reverse  these  trends,  including  improving 
software  quality,  investing  in  training  and  packaging 
basic  security  architectures. The  paper  is  online  at 
www.cerias.purdue.edu/events/accenture_cta_ 
lq2001.pdf. 

“1  seriously  doubt  the  paper  will  have  much  effect,” 
Spafford  says.“There  are  a  lot  of  people  who  agree  with 
it,  but  no  one  wants  to  be  the  first  to  slow  the  time  to 
market  or  invest  extra  resources." 

It's  likely  to  take  outside  pressure  from  government  or 
something  along  the  lines  of  a  consumer  boycott  before 

industry  will  spend  the 
time  and  money  to  ade¬ 


quately  address  the  issues  raised,  he  says.  He  fully 
expects  such  pressure  will  come. 

“The  trend  is  one  toward  an  increasingly  com¬ 
plex  and  fragile  infrastructure  that’s  being  used  for 
more  critical  purposes,”  Spafford  says.’At  some 
point,  the  fragility  is  going  to  overtake  the  utility 
and  that  will  bring  a  call  to  action.” 

Others  also  worry  that  complexity  is 
a  breeding  ground  for  disaster. The 


separate  events  that  brought  down  vari¬ 
ous  Microsoft  sites  a  while  back  present  a 
case  in  point.  One  was  attributed  to  a  techni¬ 
cian’s  mistake  during  a  router  configuration  update, 
and  the  other  was  a  denial-of-service  caused  by  a  buffer- 
overflow  attack.  So  one  was  caused  by  human  error  in 
dealing  with  a  complex  system,  while  the  other  was  a 
simple  attack  made  possible  by  a  complex  system  with 
known  vulnerabilities. 

Mark  Gibbs,  an  independent  consultant  and  Network 
World  columnist,  worries  about  the  growing  number 
and  complexity  of  computer  viruses.  He  cites  the  virus 
design  dubbed  Samhain  written  in  1998  by  three  self- 
described,“bored  people  somewhere  in  the  middle  of 
Europe.” 

The  design  describes  a  type  of  worm  that  is  portable 
among  operating  systems,  can  hide  indefinitely,  and 
learns  about  new  exploits  and  techniques  from 
similar  worms. 

“If  you  can  create  a  polymorphic  worm  with  those 
kinds  of  attributes,  that’s  pretty  remarkable,”  Gibbs  says. 
This,  along  with  the  recent  discovery  of  the  first  virus  for 
the  Web  server  scripting  language  PHR leads  him  to 
believe  other  dangers  lurk. 


IfcThe  trend  is  one  toward  an  increasingly  complex  and  fragile 
infrastructure  that's  being  used  for  more  critical  purposes.  9  9 

Eugene  Spafford 

if  cctor  of  the  Center  for  Education  and  Research  in  Information  Assurance  and  Security, 
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Outsourcjng 

everything 


As  a  way  of  dealing  with  the  complexity  inherent  in 
providing  solid  security,  and  of  running  networks  in  gen¬ 
eral,  companies  will  continue  to  outsource. 

A  lack  of  qualified  personnel  is  one  driver  behind  the 
outsourcing  trend,  especially  in  specialized  areas  such 
as  security.  Schools  aren’t  churning  out  qualified  profes¬ 
sionals  fast  enough  to  meet  demand, says  Spafford,  who 
teaches  at  one  of  the  few  schools  in  the  country  that 
offer  an  undergraduate  degree  program  in  computer 
security  He  doesn’t  see  an  end  in  sight,  given  that  those 
who  could  help  fix  the  problem  —  Ph.Ds  and  other 
qualified  faculty  —  are  being  offered  large  salaries  to 
work  in  industry  instead.  Even  undergraduates  get  hired 
before  receiving  a  diploma,  he  says. 

The  movement  toward  outsourcing  is  “a  very  natural 
evolution,” says  William  Pulleyblank,  director,  exploratory 
server  systems  with  IBM  Research.“We  outsource  every¬ 
thing  as  technology  reaches  an  appropriate  state.” 

He  cites  electric  power  generation,  which  is  now  com¬ 
pletely  outsourced.“There  was  a  time  when  everybody 
had  their  own  generator”  he  says. 

“Computing  power  has  become  much  more  of  a  util¬ 
ity’  he  says.“Companies  now  want  to  focus  on  their  core 
competence,  something  they  can  do  more  cost  effec¬ 
tively  than  anyone  else.” 


Technology  advancements  are  likely  to  help 

Terraspring,  a  start-up  in  Fremont,  Calif.,  is  launching  a 
new  breed  of  service  provider  that  it  calls  the  IT  infra¬ 
structure  provider. 

“We  can  give  you  all  the  hardware  you  need,  but  we  can 
do  it  in  seconds  or  minutes,  not  days  or  weeks,”  says 
Angela  Tucci,  a  founder  of  Terraspring.The  company 


llWe  can  give  you  all  the 
hard-ware  you  need,  but 
we  can  do  it  in  seconds  or 
minutes,  not  days  or 
weeks.99 

Angela  Tucci 

a  founder  of  Terraspring 

developed  technology  that  lets  it  quickly  corral  a  set  of 
servers  and  install  one  or  more  applications  from  a  pre¬ 
defined  application  library.  So  during  peak  hours  you  can 
configure  a  collection  of  servers  to  handle  e-mail,  while 
after  hours  use  the  same  servers  for  data  crunching  and 
reporting.  Customers  can  also  quickly  add  resources  as 
needed,  paying  only  for  what  they  use  when  they  use  it. 

“We’re  changing  the  way  people  buy  and  manage 
computing  resources,” she  says.“Don’t  go  through  a  long 
procurement  cycle,  don’t  take  the  assets  on  your  books, 
don’t  spend  a  lot  of  time  configuring  the  unique  possi¬ 
bilities  of  your  server  infrastructure.” 

E-commerce  is  another  outsourcing  driver, says 
Andrew  Efstathiou,  program  manager  at  The  Yankee 
Group  consultancy. 

“In  a  Web  environment,  as  people  are  accessing  enter¬ 
prise  systems  from  outside,  the  cost  of  being  down  is 
very  large,”  he  says.“Having  100%  availability  and  rapid 
recoverability  is  a  difficult  thing  to  achieve, so  firms  are 
outsourcing  to  address  that  issue.” 
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Breaking 

Whether  you  outsource  or  not, you  can 
bet  that  demand  for  computing  power 
will  continue  to  rise. You  can  also  bet  that 
vendors  will  step  up  to  meet  the  demand, 
and  in  new  ways  that  rewrite  old  axioms. 

IBM  Research  is  at  work  on  a  cellular 
computing  architecture  that  uses  silicon 
with  memory  and  processing  power  resi¬ 
dent  on  the  same  chip.  Data  that  it  takes  to 
solve  a  problem  is  distributed  among  the 
chips.  Each  chip  processes  its  part  of  the 
data,  analyzes  it  and  shares  results  with 
other  processors,  but  only  as  necessary 

“There  is  no  notion  that  any  central  part 
will  ever  look  at  all  the  data,”  Pulleyblank 
says.That  means  “applications  can  be 
much  more  efficient.” 

An  example  of  this  cellular  architecture 
is  Blue  Gene,  the  computer  IBM  is  build¬ 
ing  to  study  how  proteins  fold  into  vari¬ 
ous  shapes,  some  of  which  cause  disease. 
With  about  1  million  processors.  Blue 
Gene  is  more  powerful  than  the  next  500 
largest  computers  in  the  world  com¬ 
bined,  Pulleyblank  says. 

Whereas  Blue  Gene  is  being  built  for  a 
specific  function,  he  sees  more  wide¬ 
spread  appeal  for  IBM’s  cellular  comput¬ 
ing  architecture.  It  could  be  used  to  tackle 
any  problem  where  huge  data  sets  can  be 
broken  down  and  mapped  to  many  pro¬ 
cessors.  Examples  include  logistics  appli¬ 
cations,  such  as  airline  schedules  and 
warehouse  distribution  programs. 

A  big  advantage  of  the  cellular  archi¬ 
tecture  is  scalability,  Pulleyblank  says.“lf 
data  gets  larger  and  a  million  processors 
isn’t  enough,  maybe  we  need  two  mil¬ 
lion,  we  can  effectively  extend  it  up  to 
that  level,”  he  says. 

“Moore’s  Law  says  that  if  1  wait  18 
months,  the  machine  will  be  about  twice 
as  fast,”  Pulleyblank  says.“lf  1  look  at  a  prob¬ 
lem  like  protein  folding,  1  won’t  get  enough 
compute  power  to  actually  study  these 
problems  for  about  10  or  1 1  years,  and  1 
don’t  want  to  wait  that  long.This  is  a  way 
that  lets  me  jump  up  power  much  faster” 

A  key  to  the  cellular  architecture  is  that 
it  reduces  the  latency  inherent  in  storing 
data  away  from  the  computing  processor 
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processors  isnl 
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William  Pulleyblank 

director,  exploratory 
server  systems,  IBM 
Research 


Moore's  Law 

by  putting  the  processor  and  memory  on 
the  same  chip. 

“There’s  a  lot  of  work  going  on  in  that 
area,  trying  to  find  ways  to  get  processing 
closer  to  memory  in  one  form  or  another^’ 


10/1/01 


Desmond  is  vice  president  of  King  Con¬ 
tent,  a  strategic  publishing  company  in 
Framingham,  Mass.  He  can  be  reached  at 
paul_desmond@king-content.  com. 


says  Neil  Wilhelm,  director  of  Sun  Labora- 
tories.“This  is  clearly  an  area  that  Sun,  IBM 
and  many  others  are  working  in  because 
it  looks  like  there’s  a  lot  to  be  gained.” 
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Question  Authority. 

Get  the  facts  at  State  of  the  LAN7MAN: 
Embracing  Disruptive  Technologies. 


Netwoi1(Woi1(l 

TOMMEETING 

Where  technology  leaders  answer  to  you. 


How  can  you  accommodate  the  steady  wave  of 
new  technologies  entering  your  local  area  network 
(LAN)  every  day?  Do  you  make  use  of  metropolitan- 
area  networks  (MAN)  to  handle  the  load?  Put  up 
firewalls  everywhere?  Invest  in  new  offload  devices? 

There’s  no  better  place  for  practical  answers  to 
questions  like  these  than  at  State  of  the 
LAN/MAN:  Embracing  Disruptive  Technologies. 

At  this  FREE  Network  World  Town  Meeting, 
you  meet  face-to-face  with  leading  industry 
experts  willing  to  share  their  ideas,  insights  and 
vision.  Even  if  they  buck  the  status  quo. 

Join  Kevin  Tolly,  president  and  CEO  of  The 
Tolly  Group,  as  he  surveys  the  shifting  LAN/MAN 
landscape  and  moderates  sponsor  strategy  presentations.  Sandra 
Gittlen,  events  editor.  Network  World,  then  leads  interactive  roundtable 
discussions  of  today’s  most  talked-about  LAN/MAN  issues.  Plus,  she 
acts  as  your  ally  to  make  sure  your  questions  are  answered. 


State.;'.LAN/MAN 

Embracing  Disruptive  Technologies 
A  Network  World  Town  Meeting 


LA  (LONG  BEACH) 

November  27 

SAN  JOSE 

November  28 

NEW  YORK 

December  4 

BOSTON 

December  5 

CHICAGO 

December  12 

WASHINGTON,  DC 

December  13 

In  just  one  short  day,  you: 

■  Hear  how  10-Gigabit  Ethernet  could  alleviate 
some  of  your  congestion  woes. 

■  Access  information  about  emerging  LAN/MAN 
technologies  that  improve  service,  cut  costs 
and  boost  your  business. 

■  Ask  hard-hitting  questions  about  the  best  ways 
to  manage,  support  and  secure  your  LAN. 

■  Network  with  peers  who  face  the  same 
LAN/MAN  challenges  you  do. 

■  Gain  the  knowledge  to  make  informed  buying 
decisions. 

Do  what  more  than  5,000  leading  LAN  professionals  have  already 
done  —  attend  a  FREE  Network  World  Town  Meeting.  Register  for 
State  of  the  LAN/MAN:  Embracing  Disruptive  Technologies  today. 
Don’t  miss  your  opportunity  to  question  authority. 


PLATINUM  PRESENTING  SPONSOR: 


FOUNDRY 

NETWORKS 

GOLD  EXHIBITING  SPONSOR: 
O'  Agilent  Technologies 


Register  today  using  priority  code  LM01  at 
www.networkworld.com/seminars/lanman  or  call  800-643-4668. 


To  become  a  sponsor  of  this  event,  please  contact  Andrea  D’Amato  at  508-490-6520  or  adamato@nww.com. 
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COMDEX  Educational  Programs:  November  10-15, 2001 
COMDEX  Exhibition:  November  12-16, 2001 
Las  Vegas  Convention  Center,  MGM  Grand  Conference  Center, 
Las  Vegas  Hilton,  and  Sands  Expo  and  Convention  Center 


Tito  Ado-Adisa,  senior  Systems  Engineer,  Honda  Research  and  Development 


COMDEX  is  the  IT  marketplace  where  buyers  and  sellers  meet, 
team  and  make  technology  decisions. 


OFFICIAL  CORPORATE  SPONSORS  OF  KEY3MEDIA  GROUP 


Las  Vegas,  Nevada 
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Virtual  private  networks 


Tests  show  a  variety  of  top-quality  gear  available  for  enterprise  users. 


A  flooded  fleld 
for  IPSeo-based 
VPNs  is  good 
for  users 


WB  BY  JOEL  SNYDER,  NETWORK  WORLD  GLOBAL  TEST  ALLIANCE 

hile  security  vendors  will  sell  you  wares  for  any  logical  layer  and 
all  possible  locations  on  your  corporate  network,  IP  Security- 
based  VPN  gateways  have  emerged  as  the  most  popular  class  of 
product  for  setting  up  secure,  site-to-site  connections. 

In  our  evaluation  of  13  products  in  this  market,  we  looked  at  the  standard  man¬ 
ageability,  performance  and  enterprise-focused  feature  criteria,  but  we  also  added 
a  new  series  of  interoperability  tests  to  the  mix. 

In  all,  it  was  an  astonishingly  close  race.  No  one  product  stood  out  as  the  winner 
across  all  categories.  This  give-and-take  is  reflected  in  our  scorecard,  where  more 
than  half  the  products  are  within  a  point  of  each  other  in  the  final  tally  Due  to  the 
extremely  close  scoring,  we  will  not  be  awarding  a  Blue  Ribbon  Award  for  this  test. 


Because  of  ambiguities  in  the  IPSec  standard  specification,  not  every  vendor’s 
product  will  work  with  every  other  vendor’s  gear  —  even  though  each  might  have  a 
“correct”  protocol  implementation.  That  makes  interoperability  one  of  the  greatest 
challenges  for  VPN  vendors. 

We  set  up  a  hypothetical  security  policy  for  a  large,  multisite  network  and  evalu¬ 
ated  how  well  each  VPN  product  could  fit  into  that  network.  With  multiple  data 
centers  and  branch  offices  with  switches,  routers  and  firewalls,  our  test  bed  was 
designed  to  resemble  a  standard  enterprise  data  services  network.  We  tested  inter¬ 
operability  of  each  product  against  every  other  VPN  product,  both  in  setting  up  ini¬ 
tial  secure  connections  and  in  maintaining  long-term  operation  over  a  matter  of 
days.  Specifically,  we  rated  how  each  product 
worked  with  the  others,  worked  with  our  certifi¬ 
cate  authority  and  with  popular  VPN  client  soft¬ 
ware,  and  how  well  each  handled  different  VPN 
authentication  methods. 

An  important  part  of  our  evaluation  was  making 
products  work  in  a  full  mesh.  While  almost  every 
VPN  vendor  can  do  bake-off  style  interoperability 
(where  they  successfully  negotiate  a  security 
association  with  one  other  vendor),  we  wanted  to 
see  what  network  professionals  would  be  faced 
with  trying  to  pin  together  a  true  multivendor  net¬ 
work  securely. 

Our  top  interoperability  category  rating  went  to 
Secure  Computing’s  Sidewinder.  Right  behind 
Sidewinder  were  products  from  Avaya,  Check 
Pbint,  Cisco,  Microsoft,  Nortel  and  Nokia.  (See 
www.nwfusion.com,  DocFinder:  6223  for  an 
online  chart  showing  the  complete  interoperabil¬ 
ity  results.) 

Although  the  objective  scores  based  on  our 
predefined  evaluation  criteria  put  Cisco  almost 
at  the  top,  we  found  severe  restrictions  in  its 
implementation.  Cisco  has  been  both  saddled 
and  blessed  with  its  command-line  configuration 
interface.  While  some  network  managers  love  it, 

VPN  designers  will  find  it  less  than  comforting.To 
keep  VPN  configuration  manageable  within  the 
command  line  environment,  Cisco  allows  for 
only  a  single  Internet  Key  Exchange  (IKE)  policy 
per  system.  While  that  worked  fine  for  our  test  (we  wanted  a  single  corporate  poli¬ 
cy),  it  wouldn’t  work  well  in  an  environment  where  IKE  policy  varied  across  sites. 
In  fact,  when  we  added  the  SafeNet  client  into  our  interoperability  test  (see  story, 
page  51),  we  were  forced  to  break  our  Cisco  PIX  configuration:  it  could  work  with 
the  policy  we  selected,  or  with  the  SafeNet  client,  but  not  both  at  the  same  time. 

We  used  digital  certificates  issued  by  an  Entrust  public-key  infrastructure  (PKI) 
server  for  site-to-site  authentication  and  discovered  a  huge  variability  in  how  the 
VPNs  under  test  interacted  with  this  PKI.  Unauthorized  access  to  company  networks 


is  a  big  problem,  and  one  that  VPNs  can  help  to  solve. 

Sidewinder,  Nortel’s  Contivity  1600  and  Check  Pbint’s  VPN-1  all  provided  decent 
evidence  that  we  were  in  control  of  who  was  coming  into  our  network  and  what 
resources  they  had  access  to.  All  three  products  let  us  specify  in  as  little  or  as  much 
detail  exactly  what  kinds  of  certificates  were  needed  to  get  into  our  network.  In  con¬ 
trast,  Lucent’s  Access  Point  1000  and  Cisco’s  PIX  525  and  lOS  (Cisco  entered  both 
lOS  on  an  optimized  7140  VPN  Router  platform  with  hardware  acceleration  and  PIX 
525  as  site-to-site  products  with  different  capabilities  and  design  goals)  had  a  more 
relaxed  view  of  access  control;  Once  you  got  a  certificate  from  the  PKI, you  were  free 
to  make  any  kind  of  VPN  connection  you  wanted.  This  could  be  a  killer  in  an 


extranet  environment,  where  not  everyone  is  sharing  the  same  PKI  and  where  you 
got  your  digital  certificate  is  often  just  as  important  as  what  the  certificate  says. 

Hewlett-Packard’s  VPN  Server  Appliance,  RapidStream’s  2000,  RedCreek’s  Ravlin 
7160  and  WatchGuard’s  FireBox  111  4.500  all  failed  our  certificate  interoperability  test. 
In  the  case  of  RedCreek  and  WatchGuard,  neither  adequately  supports  external  cer¬ 
tificates  for  site-to-site  authentication. 

Microsoft’s  Windows  2000  Server  with  its  built-in  VPN  service  and  Lucent's  Access 
Pbint  supported  certificates,  but  had  trouble  talking  to  other  certificate-supporting 


Tracking  VPN  performance 

Product 

Best-case 
packet  flow 
(M  bit/sec) 

internet  mix 
packet  flow 
(M  bit/sec) 

Worst-case 
packet  flow 
(M  bit/sec) 

Price 

performance 
(Doilars/M  bit) 

Avaya  VSU-100 

44 

20 

4 

$60.00 

Check  Point  VPN-1** 

106 

52 

14 

$149.04 

Cisco  7140  VPN  Router 

42 

22 

6 

$420.45 

Cisco  PIX  525 

62 

56 

34 

$272.32 

Hewlett-Packard  Server  Appliance 

84 

64 

24 

$126.23 

Lucent  Access  Point  1000 

182 

122 

22 

$86.05 

Microsoft  Windows  2000  ** 

160 

104 

14 

$21.78 

Nokia  CryptoCluster  2500  (3)* 

110 

48 

12 

$312.50 

Nokia  CryptoCluster  2500  (1)* 

56 

20 

6 

$250.00 

Nortel  Contivity  1600 

22 

20 

0 

$175.00 

RapidStream  2000 

100 

54 

14 

$46.25 

Secure  Computing  Sidewinder** 

94 

66 

32 

$86.29 

WatchGuard  Firebox  III  4500 

82 

46 

$108.59 

We  ran  three  sets  of  performance  tests,  evaluating  each  product’s  behavior  in  best-case  and  worst-case  packet 
flows,  as  well  as  with  a  typical  mix  of  Internet  traffic.  Best-case  tests  comprised  packets  of  1,440-octets,  while  worst- 
case  tests  comprised  packets  of  96  octets. 

*We  tested  Nokia's  VPN  product  both  as  a  stand-alone  unit  and  as  a  cluster. 

**When  counting  price/performance  numbers,  we  added  $3,500  to  vendors  that  were  software-only  (Check  Point, 
Microsoft  and  Secure  Computing)  to  pay  for  the  hardware  base. 
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products.  For  example,  with  Lucent’s 
Access  Hoint,  we  had  to  drop  back  to  pre¬ 
shared  secrets  (a  more  compatible  but  less 
dt*sirable  authentication  system)  when 
talking  to  Avaya  and  Nokia.  Additionally, 
the  Lucent  product  failed  when  talking  to 
Cisco’s  FIX  with  our  desired  policy. 

HP  also  had  problems  related  to  strange 
configuration  requirements  in  its  IPSec 
implementation.  HP  either  wants  to  always 
initiate  the  IPSec  security  association,  or 
never  initiate  the  security  association.  In 
site-to-site  networks,  this  is  rarely  the  way 
things  work.  Thus,  we  had  a  hard  time 
maintaining  HP  security  associations, 
because  of  collisions  when  changing  keys. 

WatchGuard  and  RapidStream  also  had 
poor  interoperability  results.  In  Watch- 
Guard’s  case,  its  unchangeable  default 


security  policy  was  insecure  because  it 
uses  Data  Encryption  Standard  (instead  of 
Triple-DES)  encryption  and  Diffie-Hell- 
man  Group  l,so  we  had  to  make  a  special 
case  configuration  in  all  other  products  to 
match  the  WatchGuard  inflexibility.  Rapid- 
Stream  2000  gave  us  inconsistent  results, 
sometimes  accepting  security  associa¬ 
tions  and  then  failing  to  pass  traffic, some¬ 
times  working  perfectly. 

Enterprise  manageability 

As  VPNs  move  out  of  pilot  mode  into 
implementation,  configuration  and  man¬ 
agement  of  dozens  or  even  hundreds  of 
VPN  devices  becomes  a  major  issue.  The 
only  three  products  we  tested  that  have 
GUIs  fit  for  multisite,  multivendor  VPN 
management  were  Avaya,  Check  Point 


and  Nokia.  We  took  into 
account  how  these  tools 
managed  vendor-specific 
gear  and  how  well  each 
assisted  in  our  interoper¬ 
ability  scenarios. 

Avaya  and  Nokia  rose  to 
the  top  of  the  enterprise  con¬ 
figuration  heap  quickly  Both 
management  tools  use  sim¬ 
ple  building  blocks  to  define 
VPN  network  topology 

We  created,  modified  and 
managed  multivendor  VPN 
configurations  easily  with 
these  tools.  Nokia’s  VPN  Fbl- 
icy  Manager  GUI  lets  you 
build  complex  topologies:  combinations  of 
hub-and-spoke;  mesh;  links  between  the 
two;  and  individual  tunnels  between  any 
two  systems. 


Avaya’s  GUI  offers  less  top¬ 
ological  power,  but  has  a 
stronger  back  end.  Built  on 
top  of  a  Lightweight  Direct¬ 
ory  Access  Protocol  server, 
this  product  lets  multiple 
network  managers  view,  edit 
and  push  changes  to  a  large 
network  from  multiple  sites. 
Avaya’s  VPN  Manager  GUI 
also  has  a  built-in  client 
deployment  and  manage¬ 
ment  tool  for  remote  access 
VPNs.  Nortel’s  Contivity  1600 
has  a  similarly  powerful  tool 
built  in,  but  the  scope  does 
not  include  more  than  one 
VPN  security  gateway 
We  evaluated  Check  Point’s  recently  re¬ 
leased  version  of  VPN-1  and  were  pleased 

See  VPN,  page  50 
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•  Full  Interoperability  results 
available  online. 

•  Detailed  pricing  chart. 
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Check  Point  VPH-1 

Cisco  7140  VPN  Router 

Lucent  Access  Point  1000 

Nokia  CryptoCluster  2500  Avaya  VSU-1 00 
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I  RATING 

Cisco  PIX  525 


Company:  Check  Point 
Software  Technologies, 
(800)  429-4391,  WWW. 
checkpoint.com  Price: 
Starting  at  $11,000.  Pros: 
Strong  VPN  and  firewall 
collocation;  good  inter¬ 
operability.  Cons:  High 
cost;  requires  underlying 
NT  or  Unix  operating 
systems. 


Company:  Cisco,  (408) 
526-7200,  www.cisco.com 
Price:  $18,500.  Pros: 
Many  interfaces;  broad 
product  line;  excellent 
routing.  Cons:  High  cost; 
poor  management  tools; 
not  very  flexible  IPSec 
implementation. 


Company:  Lucent,  (888) 
458-2368,  www.lucent.com 
Price:  Starting  at  $20,500. 
Pros:  Excellent  perfor¬ 
mance;  high-end  QoS  and 
firewall  built  in;  multiple 
interface  options.  Cons: 
Command  line  interface 
betterthan  GUI;  high  cost; 
some  IPSec  weaknesses. 


Company:  Nokia,  (877) 
997-9199,  www.nokia. 
com/vpn/nokiavpn.html 
Price:  $10,000.  Pros: 
ExcellentVPN  manage¬ 
ment  tools,  strong 
interoperability.  Cons: 
High  price/performance  in 
our  test. 


Company:  Avaya,  (908) 
953-6000,  www.avaya.com 
Price:  $1,400  (hardware) 
plus  $1,000  (VPNmanager 
3.1,  software).  Pros: 
Strong  management  tools 
for  companies.  Cons: 
Mediocre  performance  in 
our  test. 


Company:  Cisco,  (408) 
526-7200,  www.cisco.com 
Price:  Starting  at 
$22,000.  Pros:  Very  good 
NAT/NAPT  features, 
firewall.  Cons:  High  cost; 
poor  management  tools; 
not  very  flexible  IPSec 
implementation. 


RATING 


RATING 


Microsoft  Windows 
2000  Server 


Company:  Microsoft, 
(650)  251-2700,  www. 
microsoft.com  Price: 
$850.  Pros:  Very  good 
price/  performance; 
strong  interoper¬ 
ability.  Cons: 
Disjointed  VPN 
management 
interface. 


Nortel  Contivity  1600 


Company:  Nortel, 
(800)466-7835,  www. 
nortelnetworks.com 
Price:  $7,000.  Pros: 
Good  GUI  for  single 
element;  well- 
thought-out  client 
deployment.  Cons: 
Low  performance  in 
this  unit;  no  enter¬ 
prise  management 
tool. 


RATING 


RATING 


RATING 


Secure  Computing 

Sidewinder 

Firewall/VPN 


Company:  Secure 
Computing,  (800)  692- 
5625,  WWW.  secure 
computing.com  Price: 
$3,900.  Pros:  Strong 
interoper-ability,  good 
price/  performance  in 
our  test.  Cons:  Fairly 
complex  management 
on  compartment¬ 
alized  Unix  operating 
system. 


HP  VPN  Server 
Appliance 


Company:  Hewlett- 
Packard,  (800)  826- 
4111,  www.hp.com 
Price:  $16,158.  Pros: 
Easy  to  configure 
with  flexible  options; 
good  client  deploy¬ 
ment  tool.  Cons:  Odd 
IPSec  configuration 
required. 


RapidStream  2000 


Company: 

RapidStream,  (866) 
727-4348,  www. 
rapidstream.com 
Price:  $5,000.  Pros: 
Good  price/ 
performance.  Cons: 
Initial  implementation 
not  very  stable. 


^■1  RATING 

WatchGuard  Hrebox  III 
4500 


Company: 

WatchGuard,  (206) 
521-8340,  WWW. 
watchguard.com 
Price:  $9,990.  Pros: 
Good  fit-for-all  Watch- 
Guard  network; 
excellentVPN  monit¬ 
oring  tools.  Cons: 
Poor  security  choices 
in  IPSec;  limited 
implementa-tion  not 
very  flexible. 


RATING 

RedCreek 
Communications 
Ravlin  7160 


Company:  RedCreek 
Communications, 
(888)  745-3900,  www. 
redcreek.com  Price: 
$8,900.  Pros:  Simple 
to  install  and 
configure;  nice  GUI 
for  single  element. 
Cons:  No  global 
management  tool; 
hardware  reliability 
issues. 
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VPN, 

continued  from  page  48 

lo  see  that  the  company  has  come  a  long 
way  in  terms  of  VPN  configurability  and 
management  since  we  looked  at  its  V4.1 
GUI  earlier  this  year.  Check  Point’s  Policy 
E/Jitor  GUI  can  now  handle  a  larger  range 
of  interoperability  scenarios.  Although  we 
tracked  down  a  few  bugs  in  the  new  soft¬ 
ware,  our  general  impression  is  that  Check 
Point  is  focusing  more  on  large  VPNs.  The 
Check  Pbint  GUI  can  easily  generate 
meshed  VPN  topologies  —  a  significant 
improvement  from  the  V4.1  GUI,  which 
tightly  restricted  a  VPN  manager’s  flexibil¬ 
ity  in  selecting  operating  parameters. 

Check  Point’s  management  tool  also 
allows  integration  of  firewall  rules  and  VPN 
settings.  Although  Check  Point’s  product 
does  not  support  the  comprehensive  array 
of  protocols  and  features  that  Lucent’s 
Access  Point  does  —  which  lets  you  stack 
firewalls  and  VPN  tunnels  in  any  configu¬ 
ration  you’d  ever  desire  —  it  handles  90% 
or  more  of  the  configurations  most  enter¬ 
prise  managers  would  dream  up. The  abil¬ 
ity  to  express  firewall  filtering  and  VPN  tun¬ 
neling  in  the  same  rule  is  an  essential  ele¬ 
ment  in  merging  VPN  and  firewall  policy 

Several  of  the  VPN  management  tools 
were  not  very  useful  in  our  interoperability 


quest.  Nortel’s  famed  Optivity  tool  is  good 
for  doing  things  to  multiple  Contivity  boxes 
without  having  to  touch  each  one,  but 
doesn’t  really  do  anything  for  site-to-site 
VPN  configuration, even  where  only  Nortel 
systems  are  included.  This  is  unfortunate 
because  Nortel’s  element  management 
(via  a  local  Web  server  on  the  Contivity  sys¬ 
tem)  is  the  best  system  management  tool 
of  any  product  we  evaluated.  If  Nortel 
could  extend  that  management  to  multi¬ 
ple  systems, it  would  have  the  knock-  down 
winner  in  this  category 
Lucent’s  optional  QVPN  Builder  GUI  went 
the  distance  in  terms  of  managing  a  net¬ 
work  of  VPN  devices  as  a  single  unit,  but 
had  a  critical  flaw:  It  was  not  designed  to 
have  anything  but  Lucent  Access  Paints  in 
the  network.  Because  of  this,  we  fell  back  to 
Lucent’s  command-line  interface  (CU)  for 
configuration.  Unfortunately  you  can’t  use 
both  the  QVPN  Builder  and  the  CLl;  you 
have  to  choose  one.  HP’s  management  tool 
for  its  VPN  Server  Appliance  has  a  similar 
restriction:  It  has  some  primitive  capabilities 
to  apply  a  single  policy  to  multiple  systems 
but  does  not  have  any  way  to  integrate  non- 
HP  products  into  the  configuration.  Watch- 
Guard’s  optional  VPN  Manager  software 
leaves  network  managers  in  much  the  same 
boat.  The  lack  of  firewall  integration  of  the 
VPN  configuration  also  left  us  disappointed 


because  WatchGuard’s  firewall  configura¬ 
tion  is  so  simple  and  intuitive. 

Microsoft’s  VPN  management  is  far  from 
simple  and  intuitive.  Although  it  is  possible 
to  create  a  single  IPSec  policy  that  could  be 
applied  to  multiple  systems  —  as  long  as 
they  are  all  Win  2000  servers  —  the  GUI  is 
complex  and  confusing.  After  92  screens, 
we  still  couldn’t  figure  out  whether  it  was 
better  than  the  competition.  Frankly,  any 
security  configuration  tool  this  complex  is 
asking  for  an  error  to  happen,  which  is 
unacceptable  in  an  enterprise  network. 

Cisco’s  new  Cisco  Secure 
Policy  Manager  will  be  a 
great  boon  to  any  network 
manager  interested  in  us¬ 
ing  either  Cisco  PIX  or  its 
lOS-based  systems  as  a  fire 
wall  or  VPN.  With  Cisco’s 
CLl  syntax  slightly  different 
from  and  incompatible 
with  lOS  to  PIX,  Cisco  Sec¬ 
ure  Policy  Manager  wins 
major  points  for  making  it 
possible  to  design  and  syn¬ 
chronize  firewall  rules  and 
intrusion-detection  systems 
across  multiple  Cisco  sys¬ 
tems.  In  this  case,  though, 

“possible”  doesn’t  mean 
“optimal.” 

Cisco  Secure  Pblicy  Man¬ 
ager  has  dedicated  tools  for 
building  VPN  tunnels.  Both 
mesh  and  hub-and-spoke 
topologies  are  supported.  Unfortunately, 
there  is  no  support  for  third-party  VPN  prod¬ 
ucts  —  you  have  to  fake  out  Cisco  Secure 
Policy  Manager  by  describing  them  as 
Cisco  elements.  More  importantly  the  VPN 
configuration  is  not  well  integrated  with  the 
firewall  rules. 

Other  enterprise  features 

No  VPN  exists  in  a  vacuum.  VPN  func¬ 
tions  may  need  to  be  combined  with  other 
parts  of  the  enterprise  network.  Common 
additions  to  VPN  devices  on  the  market 
include  firewalls,  high-availability  features, 
routing  protocol  support,  bandwidth  man¬ 
agement  and  quality  of  service  (QoS),  mul¬ 
tiple  interface  options  (besides  Fast  Ether¬ 
net,  which  is  most  common),  and  tunnel 
status  monitoring  and  reporting.  Tech¬ 
nically  these  are  not  VPN-specific  features, 
but  enterprise  managers  will  find  them 
useful  adjuncts  in  their  quest  to  build  more 
powerful  and  capable  networks. 

One  obvious  winner  in  the  “how  many 
features  can  we  add  to  a  single  box”  game 
is  Cisco.  Its  lOS-based  product  includes 
VPN  capabilities  as  a  sideline,  with  indus¬ 
try-leading  routing,  multiple  interfaces, 
high  availability,  traffic  shaping  and  fire¬ 
wall  all  built  into  the  same  system. 

Microsoft’s  Win  2000  Server  could  also  be 
considered  the  feature  king  —  what  other 
VPN  device  can  also  run  FbwerFbint  and 
Right  Simulator?  While  more  relevant  fea¬ 
tures,  such  as  simple  routing  protocols,  traf¬ 
fic  prioritization  and  basic  firewall,  are  eas¬ 
ily  available,  Wn  2000  Server  has  an  advan¬ 
tage  when  it  comes  to  database  operations 
for  remote  users,  [because  the  Wn  2000  VPN 


software  is  completely  integrated  with  the 
Windows  Active  Directory  authentication 
.system,  access  control  for  remote  users  can 
be  tightly  controlled  and  managed  from 
any  Wn  2000  system. 

The  obvious  combination  of  VPN  and 
firewall  features  makes  collocation  more 
the  rule  than  the  exception,  with  virtually 
every  product  we  reviewed  having  at  least 
limited  firewall  capabilities.  The  two  hold¬ 
outs  are  Nokia  and  RedCreek.  (RedCreek 
announced  an  integrated  firewall  in  its  VPN 
product  as  this  review  was  going  to  press.) 

We  found  Check  Paint  and 
Secure  Computing’s  ap¬ 
proaches  the  easiest  to 
deal  with.  Both  offer  an  in¬ 
tegrated  firewall  and  VPN 
rule  set.  WatchGuard  and 
HP  are  examples  of  the 
other  extreme:  The  firewall 
and  VPN  are  totally  sepa¬ 
rate  and  disconnected  ser¬ 
vices,  which  happen  to 
share  a  GUI  and  sit  on  the 
same  system. 

Routing  is  another  area 
where  integration  betw¬ 
een  firewall  and  VPN  is 
important.  Products  like 
Nokia’s  CryptoCluster  and 
Check  Point’s  VPN-1  have 
no  real  internal  connec¬ 
tion  between  routing  pro¬ 
tocols  and  VPN  status  — 
tunnels  come  up,  tunnels 
go  down  and  the  routing  algorithm  is  none 
the  wiser  for  it.  Lucent’s  Access  Point  does 
an  excellent  job  of  integrating  the  two,  rep¬ 
resenting  tunnels  as  interfaces,  which  lets 
the  routing  system  propagate  information 
about  the  state  of  the  VPN. This  can  be  crit¬ 
ical  when  a  VPN  tunnel  is  part  of  a  back-up 
strategy  or  when  multiple  redundant  paths 
exist  across  a  VPN.  In  recent  versions, 
Cisco’s  VPN  products  have  added  similar 
integration. 

High-availability  functions  varied  between 
products.  Nokia,  the  unchallenged  leader  of 
the  high-availability  load  sharing  cluster, 
focuses  on  reliability  at  a  single  point  in  the 
network  (see  wvm.nwfusion.com,  Doc- 
Finder:  6137).  Other  vendors,  including 
Avaya  and  Nortel,  built  in  reliability  from  a 
multisite  or  multilocation  point  of  view. 

Service-level  monitoring  and  reporting 
can  be  important  in  secure  enterprise  net¬ 
works.  Lucent  and  Check  Pbint  have  built- 
in  tools  to  monitor  the  latency  and  loss 
rate  of  VPN  tunnels  and  maintain  an 
internal  database  of  performance  statis¬ 
tics  that  can  be  used  for  long-term  chart¬ 
ing  or  alerting  purposes. 

QoS  is  another  enterprise-level  feature 
that  varies  among  products.  For  example, 
several  of  the  VPN  security  gateways  we 
evaluated  have  the  ability  to  mark  Differ¬ 
entiated  Service  bits  on  packets.  Avaya’s 
VSU  series  does  this,  but  won’t  change  its 
packet  handling  options  based  on  QoS 
markings.  This  is  primarily  useful  where 
other  components  in  the  network  handle 
bandwidth  management.  Other  prod¬ 
ucts,  including  Nortel’s  Contivity  and 
Cisco’s  IQS,  mark  and  allocate  bandwidth 


How  we  did  it 
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We  used  equipment  from  Cubix  and  Spirent  Communications  to  build  a 

test  bed  surrounding  the  VPN  security  gateways  under  test.  We  used  the 
Cubix  Density  system  running  custom  software  to  create  VPN  tunnels, 
verify  connectivity  between  the  gateways,  measure  up-time  and  display  the  full 
connectivity  matrix. 

We  developed  our  test  methodology  with  engineers  from  the  VPN  Consortium 
and  will  present  a  demonstration  of  this  interoperability  test  at  the  upcoming 
VPNCON  trade  show  in  Alexandria,  Va.,  from  October  15 — 18. 

We  created  an  IP  Security  (IPSec)  profile,  which  we  believe  a  prudent  network 
manager  would  want  for  a  corporate  VPN  network. 

This  profile  included  Internet  Key  Exchange  encryption  algorithm  of  Triple- 
Data  Encryption  Standard  and  authentication  of  secure  hash  algorithm  1 
(SHA-1)  using  Diffie-Hellman  Group  2  (MODP-1024)  and  a  lifetime  of  8  hours; 
IPSec  encryption  algorithm  wasTriple-DES,  authentication  was  SHA-1,  per¬ 
fect  forward  secrecy  was  enabled  for  Diffie-Hellman  Group  2,  and  lifetime 
was  one  hour. 

Our  test  bed  comprised  multiple  data  centers  and  branch  offices  with  switches, 
routers  and  firewalls.  We  tested  the  interoperability  of  each  product  against  every 
other  VPN  product  both  in  setting  up  initial  VPN  connections  and  in  maintaining 
long-term  operation  over  a  few  days.  Specifically,  we  rated  how  each  product 
worked  with  each  other  product,  with  our  certificate  authority  and  popular  VPN 
client  software,  and  how  well  different  VPN  authentication  methods  worked  in  our 
hypothetical  network. 

To  handle  authentication  of  the  security  association,  we  used  an  Entrust  pub¬ 
lic-key  infrastructure  (PKI)  to  pass  out  digital  certificates  to  each  security  gate¬ 
way.  Because  Entrust’s  PKI  corners  a  significant  share  of  the  market,  it  was 
reasonable  to  expect  all  devices  to  support  it,  at  least  in  manual  enrollment 
mode.  Some  devices  supported  simple  certificate  enrollment  protocol  enroll¬ 
ment  to  our  Entrust  PKI;  with  others,  we  used  manual  enrollment  to  the  Entrust 
server,  We  used  preshared  secrets  for  authentication  in  cases  where  the  secur¬ 
ity  gateway  did  not  support  digital  certificates  (or  our  Entrust  PKI). 

T  o.ipture  performance  for  these  devices,  we  used  a  set  of  six  Nokia  Crypto- 
■  :ster  2500  gateways  against  each  system  being  tested.  This  configuration  is 
:  to  saturate  a  100M  bit/sec  full-duplex  Ethernet  network  with  64-octet 
i  K-  We  generated  User  Datagram  Protocol  (UDP)  packets  of  various  sizes 
.  Smartbits  gear  and  off-the-shelf  test  software,  and  measured  when  loss 
wr  ‘  ivt  0.‘  :  using  a  precision  of  2M  bit/sec. 


Live  VPN 
interoperability 
demo 

The  VPNC/Network 
World  VPN 
interoperability 
demonstration 
based  on  this 
testing  will  be 
featured  at  the 
VPNCON  trade  show 
in  Alexandria,  Va., 
October  15-18. 

•VPNC® 
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to  tunnels  based  on  configured-in  rules. 


Performance 

We’ve  found  —  both  in  this  and  in  past 
tests  —  that  performance  of  VPN  devices 
varies  widely.  In  many  cases,  vendors  pur¬ 
posefully  understate  performance  to 
drive  sales  to  more  expensive  devices;  in 
other  cases,  they  overstate  performance 
to  make  their  products  appear  more 
competitive.  While  we  did  not  conduct  a 
comprehensive  suite  of  performance 
tests  —  as  that  was  not  our  primary 
objective  for  this  review  —  we  did  take 
the  opportunity  to  run  some  quick 
benchmarks  to  offer  apples-to-apples 
comparisons  of  these  products. 

We  ran  three  sets  of  performance  num- 


Client 

interoperability 

Generally,  remote  access  client 
interoperability  is  not  a  big 
concern.  Most  companies 
have  only  a  small  number  of  remote 
access  gateways  and  will  typically 
select  a  single  vendor  to  provide  the 
gateways  for  their  users.  The  client 
software  provided  by  the  gateway 
vendor  is  then  the  obvious  choice 
for  the  company. 

Two  companies  have  made  a  busi¬ 
ness  of  providing  interoperable 
clients  for  IP  Security  (IPSec)  ac¬ 
cess  to  enterprise  networks.  Safe- 
net  (formerly  IRE)  sells  its  Windows- 
only  client  in  an  OEM  configuration 
to  many  VPN  vendors.  Network  As¬ 
sociates'  PGP  division  offers  Win¬ 
dows  and  Macintosh  versions  of  an 
IPSec  client  application.  We  invited 
Safenet  to  come  in  for  a  brief  inter¬ 
operability  test  to  see  how  well 
things  would  work. 

Results  were  mixed.  In  the  best 
case,  Nokia  and  Check  Point 
Software  gateways  take  Safenet 
as  a  completely  compatible  client 
right  out  of  the  starting  gate.  Some 
gateways,  including  those  from 
Nortel,  Lucent,  Cisco  and  Secure 
Computing,  required  that  we  make 
minor  changes  to  our  profiles  be¬ 
fore  they  would  handle  Safenet 
clients  properly.  Cther  gateways, 
such  as  those  from  Avaya,  Micro¬ 
soft  and  Hewlett-Packard,  were 
unfriendly  to  foreign  clients.  They 
wouldn't  work  unless  the  client 
looked  like  a  gateway  with  a  static 
IP  address,  which  is  not  generally 
useful  for  remote  access  client 
configurations.  Finally,  other  ven¬ 
dors,  including  Cisco  with  its  PIX 
entry,  the  configuration  of  the  sys¬ 
tem  was  so  restricted  that  by 
adding  client  compatibility  we 
broke  site-to-site  interoperability. 


bers,  evaluating  behavior  in  best-case  and 
worst-case  packet  flows,  as  well  as  with  a 
typical  Internet  mix  (see  graphic,  page  47). 
For  the  Internet  mix,  we  used  data  collect¬ 
ed  from  an  Internet  backbone  to  build  a 
profile  of  approximately  50%  small  packets 
(96  octets  or  less),  10%  large  packets  (1,518 
octets,  the  Ethernet  maximum  transmission 


unit),  20%  576  octets  (a  common  WAN 
MTU)  and  20%  assorted  between  192  and 
1,024  octets. 

We  discovered  that  for  line  speeds  of  up 
to  lOM  bit/sec  (full  duplex, about  a  quarter 
of  a  DS-3/T-3  circuit),  any  of  the  products 
can  keep  up  —  but  Avaya,  Nortel,  Rapid- 
Stream  and  Microsoft  give  you  excellent 


price/performance  ratios. 

If  you  want  to  push  to  a  full  DS-3  circuit 
(45M  bit/sec,  full  duplex),  again  using  “real 
world"  packet  sizes,  only  Lucent’s  Access 
Point  with  dual  cryptographic  accelerators 
and  the  one-two  punch  of  Win  2000  com¬ 
bined  with  Intel’s  Pro/lOOS  cryptographic 
network  interface  cards  (NIC)  beat  the 


IDS 


FireProof  intelligently,  load  balances  and  directs  IP  traffic 
to  security  devices  such  as  firewalls,  VPNs  and  IDS  systems. 

It  eliminates  bottlenecks  and  single  points  of  failure,  ensuring 
that  security  systems  are  always  available  and  optimized. , 
FireProof  allows,  for  manageable  and  cost  effective  growth,  . 
laying  the  foundation  for  a  salable  security  infrastructure.  •  „ 
FireProof  allows  for  different  levels  of  service  for  users 


and  applications;  while  protecting  firewalls  and  servers. 


Choose  FireProof  for  intelligent  security  traffic  management.  < 
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fX)M  bit/sec  needed  to  handle  that  circuit. 
By  adding  less  than  $200  worth  of  hard¬ 
ware  to  our  system,  we  drove  total  IPSec 
performance  of  Win  2000  up  to  more  than 
1 60M  bit/sec  in  the  best  case  (large  pack¬ 
ets).  GKen  the  low  cost  of  Pentium-based 
PCs, Win  2000  Server  software  and  the  Intel 
NlCs,  this  particular  packaging  achieved 


price/performance  ratios  between  10  and 
20  times  better  than  the  other  vendors’. 
However,  we  note  that  our  performance 
tests  were  done  with  only  six  IPSec  securi¬ 
ty  associations.  As  a  central  site  system 
with  500  security  associations,  we  saw  total 
performance  of  our  Win  2000  system  drop 
dramatically  to  less  than  8M  bit/sec  for  the 


Internet  mix. 

Nokia  offers  a  load-sharing  product  and 
we  tested  it  in  two  ways:  as  a  single  stand¬ 
alone  system  (a  single  CryptoCluster  2500) 
and  as  a  cluster  (three  clustered  Crypto- 
Cluster  2500s).  The  results  were  fairly  dra¬ 
matic,  showing  almost  linear  growth  in  per¬ 
formance  along  with  growth  in  cluster  size. 


Breadth  of  product  line 

Enterprise  network  managers  often  need 
to  mix  everything  from  dial-up  modems  to 
155M  bit/sec  OC-3  lines  in  the  same  net¬ 
work.  For  that  reason,  a  one-size-fits-all 
approach  won’t  work  in  the  real  world.This 
is  one  reason  multivendor  interoperability 
is  so  important:  Small-office/home-office 
(SOHO)-sized  products  from  vendors  such 
as  RedCreek  and  WatchGuard  may  be  the 
right  fit  for  some  parts,  perhaps  talking  back 
to  gigabit  behemoths  like  the  Nokia  5205. 

At  the  same  time,  a  single  vendor  im¬ 
mensely  simplifies  management, as  we  saw 
so  dramatically  and  a  broad  product  line 
can  be  an  important  advantage.  Therefore 
we  also  looked  at  the  breadth  of  VPN  prod¬ 
uct  line  in  our  rating  equation.  We  wanted 
to  know  how  well  vendors’  product  lines 
reached  up  to  data<enter-sized  encryption 
engines  and  stretched  down  to  the  SOHO 
market  with  inexpensive  simple  devices. 
We  also  evaluated  how  well  network  media 
other  than  the  vanilla  Fast  Ethernet  were 
included:  WAN  interfaces  such  as  T-l/T-3 
and  ISDN  can  be  important  in  keeping 
costs  down,  while  Gigabit  Ethernet  is  criti¬ 
cal  for  the  high-end  data  center. 

The  obvious  winner  in  this  area  is  Cisco’s 
lOS.  With  more  than  a  dozen  chassis 
options,  products  ranging  from  less  than 
$1,000  to  the  Internet-core-sized  GSR 
12000,  with  its  six-figure  price  tag,  and 
interfaces  ranging  from  built-in  modem 
up  to  Gigabit  Ethernet  —  no  one  beats 
Cisco’s  lOS  when  it  comes  to  breadth  of 
product  line. 

However,  high  scores  in  this  category 
don’t  necessarily  equate  to  the  same  level 
of  flexibility,  so  investigate  what  hardware 
and  speeds  you  need  in  this  area  carefully 
For  example,  Cisco’s  PIX  525  rated  well 
because  of  the  large  number  of  simultane¬ 
ous  interfaces  supported,  while  Nokia’s 
CryptoCluster  2500  got  the  same  score 
because  they  stretch  from  branch  office  to 
data  center  in  speed  —  although  Nokia 
only  supports  two  interfaces  on  its  systems. 

This  review  shows  there  is  room  in  the 
VPN  marketplace  for  more  than  a  handful 
of  vendors.  Each  product  evaluated  has 
specific  strengths  and  weaknesses;  each  is 
designed  with  a  different  kind  of  network, 
management  style,  VPN  size  and  set  of 
requirements  in  mind. 

Snyder  is  a  senior  partner  at  Opus  One  in 
Tucson,  Ariz.  He  can  he  reached  at 
Joel. Snyder®  opus  I.  com. 
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■  CAREER  DEVELOPMENT 

■  PROJECT  MANAGEMENT 

■  BUSINESS  JUSTIFICATION 


Downsizing  with  dignity 

Many  firms  make  layoffs  less  painful  for  their  employees  with  outplacement  help  and  rehiring  bonuses. 


■  BY  TOM  DUFFY 

Bill  Baker,  a  former  systems  engineer  for  Commerce  One  in 
Harmony  Park,  Mich.,  wasn’t  surprised  when  he  got  laid  off  in  late 
April.  In  fact,  just  a  week  earlier,  a  human  resources  representative 
at  the  e-commerce  service  provider  asked  him  for  his  resume  and 
forwarded  it  to  client  Ford  Motor,  where  his  two  superiors  had 
recently  moved  hoping  to  avoid  the  same  fate. 

Baker  collected  a  month’s  severance 
pay  after  he  was  let  go,  even  though  he’d 
only  been  there  four  months.  Commerce 
One  also  set  him  up  with  the  outplace¬ 
ment  firm  Spherion,  which  helped  him 
buff  up  his  resume  and  hone  interviewing 
and  salary  negotiation  skills. 

The  assistance  paid  off.  Within  weeks, 

Baker  was  working  as  a  network  engineer 
for  J&D  Technology  Group,  an  IT  consul¬ 
tancy  in  nearby  Clinton  Township. Thanks 
to  a  different  tax  structure  and  commute. 

Baker  now  earns  about  $4,000  more.  Still, 
he’s  got  nothing  but  good  things  to  say 
about  Commerce  One. 

“1  don’t  know  if  I’d  go  back  to  the  same 
office,  but  I’d  go  back  to  work  for  them,” 
he  says. 

Commerce  One  executives  declined  to 
be  interviewed  for  the  story.  But  as  the 
economy  continues  to  sputter  and  the 
number  of  layoffs  in  the  tech  sector  con¬ 
tinues  to  rise, Commerce  One  and  a  grow¬ 
ing  cadre  of  other  companies  appear  to 
be  taking  a  gentler  and,  in  some  cases, 
more  progressive  approach  to  layoffs. 

Outplacement,  sometimes  for  an  unlimited  period  of  time,  and  incentive  pay  for 
returning  employees  are  just  a  few  of  the  tools  companies  are  using  to  cushion  the 
blow  to  workers  and,  potentially,  to  themselves. 

“We  find  that  particularly  in  the  technology  business  they  want  to  create  an  alumni 
group  that  would  want  to  come  back  to  work  for  them ’’says  Robert  Morgan,  president 
of  Spherion’s  human  capital  consulting  division. “They  know  at  some  point  that  the 
economy  is  going  to  turn  and  they  are  going  to  either  rehire  these  people  or  they  are 
going  to  be  customers  or  partners  or  references  in  other  organizations  that  are  going 
to  impact  their  business.” 

Morgan  says  the  intensely  competitive  hiring  environment  in  the  technology 
sector  of  just  a  year  or  two  ago  has  contributed  to  the  approach  some  companies 
have  taken. 

“A  lot  of  these  companies  have  good  employee-friendly  skills  and  built  environ¬ 
ments  where  keeping  employees  happy  was  important,”  he  says. “They  have  applied 
the  same  skills  so  they  can  have  happy  alumni.” 

Still,  that  doesn’t  mean  everybody  is  happy  with  the  way  they  have  been  let  go. 

John  Chu,of  Basking  Ridge,  N.J., spent  23  years  working  for  Lucent  and  predecessor 
Western  Electric  as  a  network  manager  in  New  England,  and  more  recently  doing  net¬ 


work  support  in  the  marketing  division  from  an  office  in  nearby  Warren,  N.J. 

Chu,who  just  turned  50,  was  among  a  first  wave  of  about  10,500  Lucent  employees 
let  go  in  January.  Chu  “retired”  on  what  he  called  a  discounted  Lucent  pension,  about 
$400  per  month  less  than  the  full  amount,  which  in  either  case  wouldn’t  be  enough 
for  him  to  live  on.  His  quarrel  with  Lucent  was  that  employees  who  were  released  in 
a  subsequent  voluntary  layoff  were  offered  incentives  that  he  wasn’t  offered. 

“They  added  five  years  to  your  age  and  service,  which  for  me  would  have  undis¬ 
counted  my  pension,”  he  says.“So  it’s  worth  a  lot  of  money’ 

Lucent  spokesman  William  Price  says  the  downturn  and  changing  business  condi¬ 
tions  dictated  different  approaches  to  the  layoffs.  Unfortunately  for  Chu,  he  was  one 
of  the  4%  of  employees  let  go  in  the  initial  layoff  for  whom  the  later  incentives  would 
have  made  the  difference  between  a  partial  and  full  pension. 

Through  voluntary  reductions, 
attrition  and  layoffs.  Lucent 
shrank  from  about  155,000  em¬ 
ployees  to  87,000  in  the  past 
year,  according  to  Price.  Price 
didn’t  know  how  many  of  those 
reductions  might  have  involved 
IT-related  positions. 

Continuing  education 

Charles  Schwab,  which  has  laid 
off  about  2,000  people  in  the  past 
few  months  and  will  have  re¬ 
duced  its  workforce  by  nearly 
25%  by  year-end  through  attrition 
and  other  means,  is  offering 
rehiring  bonuses  of  $7,500  to  any¬ 
one  who  returns  to  work  for  the 
company  within  18  months  of 
being  let  go.  In  addition,  the 
Schwab  Family  Foundation  has 
put  $109  million  toward  educa¬ 
tional  assistance  for  laid-off 
employees,  who  can  receive  up  to 
$10,000  per  year  for  two  years  to 
return  to  school,  according  to 
company  spokesman  Greg  Gable. 

“They  were  designed  to  make  the  transition  as  easy  for  folks  as  possible,”  Gable  says 
of  the  benefits.“But  it’s  also  an  effort  that  looks  inward. The  people  who  remain  want 
to  see  that  the  company  did  as  much  as  it  could  to  soften  the  blow.” 

Spherion’s  Morgan  says  that  kind  of  approach  can  be  good  for  morale  during  other¬ 
wise  difficult  times. 

“For  those  left  behind  it  will  help  them  decide  whether  they  want  to  stay  or  not,” 
Morgan  says.  “People  are  thinking, ‘If  this  ever  happens  to  me,  how  am  1  going  to 
be  treated?’” 

Unfortunately  for  Mary  Stipe,  network  manager  for  an  Ohio  tool  and  dye  manufac¬ 
turer,  she  knew  the  answer  to  that  question.  Last  March,  Stipe  was  let  go  after  nearly 
three  years  on  the  job.  Stipe  says  she  received  no  severance  pay,  no  outplacement  and 
certainly  no  offer  of  a  Schwab-like  hire-back  bonus  or  educational  benefits. 

“They  called  me  in  and  said,  ‘Bye,  don’t  let  the  door  hit  you  on  the  butt  on  the 
way  out,’”  she  says.  “It  was  kind  of  ugly  except  for  the  fact  that  I  had  seen  them  do 
it  before.” 

Duffy  is  a  freelance  writer  in  Haydenville,  Mass.  He  can  be  reached  ai 
tomduffy62@aol.  com. 


Bill  Baker,  working  at  home  with  daughter  Annelise,  quickly  rebounded  from  a  layoff,  thanks  to  out¬ 
placement  help. 


4ccess  Your  Network  Equipment  From  Anywhere! 

When  it  comes  to  Remote  Site  Management,  no  one  offers  more  choices  to  remotely  access  multiple  console  ports  and/or  reboot  power  than 
Western  Telematic.  Our  Remote  Management  Hardware  offers  the  design  flexibility  you  need  to  mix  and  match  equipment  for  small  or  large  scale 
remote  management  strategies.  As  the  pioneer  and  leader  in  Remote  Site  Management,  WTI  products  are  now  installed  in  thousands  of  network 
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Console  Management  Switch  (CMS) 
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Secure  Rack  Modem  (SRM) 

•  Up  to  100  Individual  Passwords 
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Unrivaled  KVM  Access  and  Control 


I-iooking  for  greater  access  to  more  servers? 
Need  the  flexibility  to  handle  multiple  platforms 
or  users?  Step  up  to  Avocent  KVM  switches. 

Our  AutoView  series  controls  up  to  24  multi¬ 
platform  servers  as  far  as  500  feet  away. 
Choose  an  Avocent  OutLook  switch  for  true 
mult-user  access  to  your  rack-mounted  servers. 
Both  switches  are  expandable,  designed  to  keep 
pace  with  your  growing  data  center. 

Find  out  what  the  world’s  leading  technology 
companies  and  server  manufacturers  already 
know,  and’take  your  switching  to  a  higher  level. 


ADVANCED  KVM  SWITCHES, 

' 

Users 

Ports 

Platforms 

Key  Features 

AutoView  200 

1  local,  1  extended 

4,8 

PC 

All  models  are 

AutoView  400 

1  local,  1  extended 

8,16,24 

PC,  USB,  Sun 

rack  mountable, 
flash  upgradeable 

OutLook  21  GOES 

2 

16 

PC 

and  expandable 

OutLook  41  GOES 

4 

16 

PC 

with  built-in  on 
screen  display. 

Go  to  www.avocent.com  or  call 
1-866-AVOCENT  (286-Z368) 
and  get  your  free  KVM  buyers 
guide  today 


Avocent. 

The  Power  of  Being  There™ 


Avocent  the  Avocent  logo  and  ‘The  Power  of  Being  There’  are  trademarks  of  Avocent  Corporation.  Cybex  and  AutoView  are  registered  trademarks  of  Cybex  Computer  Products  Corporation. 
Apex  and  OutLook  are  registered  trademarks  of  Apex  Inc.  All  other  marks  are  the  property  of  their  respective  owners.  C  2001  Avocent  Corporation. 
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Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  &  Canada  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 


N  Troubleshooting 

&  Protocol  Analysis  Software  Solutions 


Observer — Removes  the  Mystery  of  What  is 
Being  Sent  or  Received  by  LAN  Stations 

Observer  identifies  network  trouble  spots  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  any  network  problems,  find 
out  the  cause  with  Observer,  Expert  Observer  or 
Obseiver  Suite. 

•  Full  packet  capture  and  decode  for  over 
1000  protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBEUI,  IPX/SPX,  Appletalk, 

SNA  and  DECnet 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
packet  capture  from  any  port(s) 

•  Long-term  network  trending  collects  statistical 
data  for  days,  weeks,  months,  even  years 

•  Optimized  ErrorTrack  NDIS  drivers  display 
true  errors-by-stations 

•  Real-Time  Statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics, 

Efficiency  History 


EXFEirr  OB$En¥Eit® 
(^^ERVER®  OBSERVER®  SUITE 

^1895 


•  Additional  probes  are  $295  per  local  or  remote 
segment/site/switch 

•  Ethernet  (10/100/1000),  Token  Ring.  FDDI 

Expert  Observer — Identifies  Problems  and 
Provides  Expert  Information  in  Plain  English 

Expert  Observer  includes  all  of  the  features  of 
Observer  plus  real-time  and  post-capture  expert 
event  identification,  expert  analysis,  VoIP  expert 
and  modeling  of  network  traffic  data. 

Observer  Suite — The  Ultimate  Tool  For  The 
Most  Demanding  Power  User 

Observer  Suite  provides  a  full  complement  of  tools 
that  includes  all  of  the  features  of  Expert  Observer 
plus  SNMP  management,  RMON  console/Probe 
and  Web  reporting.  Includes  one  remote  Probe. 


Are  You  Gambling  With  Your 
Expensive  Data  Center  Systems? 


Dealer  Inquiries  Welcome 


1-877-427-5722 

www.sharkrack.com 

infoshark@$harkrack.com 


^HARK 

l?ACK 


You  may  be  if  you  aren’t  using  SharkRac'k  cabinets  and 
racking  systems.  Our  cabinets  are  made  of  the  highest 
quality  materials,  including  aluminum  extrusion  and  heavy 
gauge  steel.  We  use  heavy  duty  fans  in  our  cooling  sys¬ 
tems.  And  SharkRacks  look  great  and  are  featured  in 
some  of  the  world’s  foremost  show-case  data  centers. 
Best  of  all,  you  can  still  access  disks,  CD-ROMs,  and 
other  components  after  your  computers  are  racked. 
Give  us  a  call  today  to  see  how  we  can  help  you 
Save  Space,  Keep  Cool,  and  Look  Good. 


The  SharkRack  NetBotz  environmental  monitoring 
Our  Keyboard/Flat  Panel  sys-  appliance  will  watch  over  conditions  in  our  cabinets 

tern  takes  up  only  1  RU  in  total.  and  send  out  an  alert  to  notify  of  problems  in  advance. 
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*FREE 

limited  time  offer 

Microsoft  Authorized  and 
Approved  Training  Guides 


red  hat. 


CNE. 

Novell.* 


GET  TRAINED  OR 
CERTIFIED...FAST! 

SELF  STUDY  TRAINING  VIA  THE  INTERNET,  CD-ROM  AND  VIDEO 


ORACL.e* 


*CALL  FOR  DETAILS 

800.789.7990 


INLINE 

university 


MAKE  MONEY  NOW 


August  2001  report  by  the  International  Data  Corporation  (IDC),  “the  U.S.  corporate  e-learning 
market  is  on  track  for  a  growth  rate  of  more  than  50%,  generating  nearly  $2.3  billion  in  2000 
and  exceeding  $18  billion  in  2005.” 

That’s  a  growth  of  over  $15  billion  in  the  next  four  years!  '  i 

Oust  ask  successful  people) 

You  are  at  the  right  place  at  the  right  time 

We  are  offering  an  exciting  opportunity  to  a  limited  number  of  people  and  those  who  join 
NOW  will  benefit  from  our  “KICK  OFF”  at  the  in  Las  Vegas. 


CfILL  NOW  FOR  bmiL5 

(727)  547  8186  re 
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To  leant  more  call  814-835-1650 
or  for  instant  online  information, 
go  to  ww'w.spectnimcontrol.com 

and  enter  UJ2230  . 
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•  Reboot  via  Built-in  modem,  LAN/WAN 
and  wireless  connections 

•  Lower  costs  through  reduced  network 
downtime  and  field  service  visits 


•  SMART start  and  SHARPstart  PDU’s  offer 
customization  and  are  upgradable 

•  Menu-driven  user  friendly  interface  and 
secure  password  protection 

•  Global  access  to  monitor,  program, 

I  reboot  and  sequence  outlets 


SPECTRUM  CONTROL  INC. 

Power  Technologies  Group 

www.spectrumcontrol.com 


^  . 
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Low  cost  complete  RMON  monitoring  for  remote  sites  or 
segments. 

Software-only,  non-dedicated  data  collection. 

Pure,  full  RMON  1  and  2  support.  Complete  implementation  of 
both  RMON  1  and  2  for  Ethernet  (10/100)  and  Token  Ring  (4/16). 

Full  adherence  toRFCs  1513.  1757.  2021  and  2074. 

Runs  as  a  service  on  Windows  NT  or  Windows  2000. 

Works  with  RMON  management  console  or  collection  facility 
i'ODst.'fvar  OpenVIew  Concord  '.  NetScout*",  etc.). 

,  Compatible  with  Network  Instruments'  optimized  ErrorTrack^  NDIS 
'.-.drives  QispiOv  true  errors-by-station. 

'^f^iUpte  concurrent  network  Interface  monitoring  (up  to  10). 

THOUSANDS  MORE  FOR  THE  SAME  DATA? 

^^^^l^  80Q-526-7919  FOR  INFORMATION,  OR  SEE  OUR  WEB  SITE  AT: 


>  l952j  932-9899  FAX  (952)  932-9545 
■.•.on<in«in.(Ti«.'i!s.£X3m  www.netwof4unstruments.eom 
'  f.  1.  rjments.  LLC  Minnsapotts.  Mn  USA 
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Complete,  industry  standard,  software-based  RMON2  and 
RMON1  Probe  for  Windows  95/98/NT/2000 


Network  Instruments  RMON  Probe 
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Sentry  ;  PowerTower 


'  9  SentryPOWER  tower  :  Your  zero  U  Reboot  Solution 


i6  remotety  addressable  power  outlets  — 
The  highest  density  available  of  any 
Remote  Power  Management  vertical  strip. 
30-amp  power  Input  feed  distributed 
across  i6  outlets. 

Mounts  vcrticaliy  In  your  equipment  rack  or 
cabinet  and  requires  Zero  U  of  space. 
Load  Sense  provides  real-time  current 
monitoring  In  the  remote  screen  inteifece 
and  through  a  built-in  LEO  display  for  on¬ 
site  measurement 

Power-up  sequencing  of  all  i6  outlets 
prevents  an  In-rush  current  overtoad. 
Telnet,  SNMP,  Modem  or  itS-232  Interfaces  for  easy, 
practical  and  secure  power  management  of  remote 
Intemetworidng  equipment 


How  do  you  reboot  l6 

equipment  units... 


using  Zero  U 

of  rack  space? 


I 


Install  the  new  Sentty  Pptiwr. 
your  data  centaiv  MK  or 
and  gain  the  advantata  0# 
rebosidng  up  to  i6  of  yair 
unita—  Mrithottboocupyh^ 
your  rack  or  endoaod  cabinet  -  ^ 

Try  the  Mew  Scntiy  Rawer  Unoer  bi  your 


rack  or  eddnet  and  iwlze  die  I 
‘  of  Intelligent  Power  Dlstrlbuflon  and 
*  Remote  Rower  Mm^emenL 


See  oir  omptate  product  Ine  at  ■awmiwrtedueet 
Of  call  8eo ^5.1515  or  jnaA^xm 
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GigaBit  Fault  Tolerant-Redundant  Security  Port  Selector 

Net  Optics'  Fiber  GigaBit  Fault  Tolerant  Port  Selector 
detects  fault  line  automatically  to  prevent 
your  network  traffic  from  stopping. 

This  product  is  a  MUST  for  ISP  centers, 
and  central  offices  with  critical  ^ 

data.  Works  well  with  all  GigaBit  |30dir*0 
Servers,  Switches  brand  names.  ,  r— n  a  ^ 

Network  Redundancy!  ""“'NETWORK 


visit:  www.netoptics.com/net-96260.html 


GigaBit  Copper  to  SX,  LX  or  ZX  Fiber  Converters 

Net  Optics'  Gigabit  Copper  to  Fiber  Converter  allows 
network  managers  to  migrate  to  GigaBit  Ethernet 
in  a  cost-effective  manner. 

Simply  plug-in  the  Cables. 


visit:  www.netoptics.com/sx-tx-converter.html 


GigaBit  ZX,  LX  to  SX  Media  Converter 

Net  Optics'  Fiber  Optic  Mode  Converter  is  used  to 
connect  two  devices  operating  with  GigaBit  multimode 
LX  fiber  to  SX  fiber. 

The  fiber  converter 
provides  transparent 
conversion  of  optical 
signals. 


visit:  www.netoptics.com/converter-gig.html 


Fiberoptics  Cable  Assemblies 

The  Net  Optics'  total  solutions  approach  can  provide  you 
with  any  type  of  fiberoptic  cable  assembly  you  need, 
from  LC,  MTRJ,  SC,  MIC,  FC  or  Escon  patch  cords  for 
your  ATM,  Gigabit  and  any  other  network. 

Also  available: 

LC,  SC,  MT-RJ  fiberoptic  Loopbacks. 
visit:  www.netoptics.eom/2.html 


Network  Monitoring  Accessories 

In  some  countries  ISP's  must  be  TAPable...  is  the  new  Law! 


GigaBit  SX,  LX  or  ZX,  ATM,  DS3,  T1,  Copper  and  Fiber  Taps 

These  Splitter  Taps  have  capabilities  that  will  allow  the 
networks  to  operate  at  a  continuous  flow  while  the  tap  is 
non-operational,  thus  maintaining  network  integrity.  This 
enables  you  to  monitor  the  network  without  disconnecting 
any  one  link! 

The  Fiber  Splitter  Tap  has  passive-link  integrity  that  is 
maintained  whether  the  device  is  on  or  off. 

Copper  Gigabit  to  Fiber  Taps  feature  two  Power 
Supplies  which  are  load  sharing.  If  either  unit  fails, 
the  remaining  power  supply  comes  up  to  full  power 
and  takes  over  the  additional  load. 

Compatible  with  all  analyzer  manufacturers  including: 

Network  Associates'  Sniffer®,  Agilent's  Internet  Advisor  and 
Cisco's  SwitchProbe  products. 

'"♦visit:  www.netoptics.com/11.html 

Net  Optics'  GigaBit  TX  to  SX  Tap  is  the  market's  first 
copper  to  fiber  tap! 


GigaBit  Fiber  Tap 


Copper  to  FX.  SX,  LX,  ZX  Tap 


Copper  100BaseT  Tap 


6  Station  Tap 


Troubleshoot 

NETWORK 

_  Problems 


Tsp  Diagnostic 


CH]Opf/cs™ 

www.netoptics.com 


Bright  idoctst,..  Built  /or  sf^ee:€il 


Note:  Sniffer®  is  a  registered  trademark  of  Network  Associates  Inc. 


Net  Optics.  Inc.  •  1230-AOId  Mountain  View-Alviso  Road  •  Sunnyvale,  CA  94089-2237  •  USA  Tel:  +1  (408)737-7777  •  Fax:  +1(408)745-7719  *  world@netoptics.com 
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New  Charge-UPS’  programs  provide  "Bumper 
to  Bumper"  overhaul  for  aged  UPS  units 

APC's  family  of  upgrade  programs  helps  customers  revitalize  older  Smart-UPS®  and  Back-UPS®  units 


IT  Managers  that  have  recently  upgraded  to  new  server  technology  now  have  options  to  help  eliminate  costly  downtime.  APC's  new  Charge-UPS  and 
Charge-UPS  EX  programs  provide  end-users  the  ability  to  inexpensively  refurbish  existing  APC  UPS  units  to  "like-new"  conditions. 


APC's  new  Charge-UPS  program  is  an  easy  and 
inexpensive  way  for  customers  to  upgrade  their 
current  power  protection  and  management  to  run 
just  like  new,  simply  by  replacing  their  old  batteries 
with  a  new  premium  battery. 

Additional  Benefits 

Charge-UPS  also  offers  a  pre-paid  package  for 
proper  disposal  of  old  batteries  and  shipping  via 
FedEx  if  a  problem  should  arise  with 
the  UPS  unit.  Charge-UPS  users 
will  also  receive  a  FREE  30-day 
trial  of  APC's  new  PowerChute 
Inventory  Manager  software,  a 
Web-based  inventory  management 
and  reporting  tool  for  network 
administrators.  This  award-winning  soft¬ 


ware  allows  users  to  maximize  the  availability  of  the 
network  by  proactively  diagnosing  the  health  of  APC 
UPSs  across  a  wide-area  network. 

APC  also  offers  the  Charge-UPS  EX  program,  which 
benefits  users  that  do  not  want  to  handle  battery 
replacement  themselves  or  who  require  special 
service  for  their  UPS  (as  in  the  case  of  older  APC 
UPSs  that  do  not  feature  user-replaceable  batteries). 
The  program  includes  all  the  benefits  of  the 
Charge-UPS  program  plus  an  additional  service  option. 

Upgrading  to  a  New  UPS?  Try  APC  Trade-UPS! 

For  customers  interested  in  upgrading  to  a  new  UPS, 
APC's  Trade-UPS  program  offers  a  40%  discount 
on  a  new  system  up  to  two  times  the  VA  (volt 
amps)  of  their  current  UPS,  or  the  ability  to  trade  in 


mhrn  - 


>  0 
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multiple  UPSs  for  a  larger  system  with  the 
latest  APC  UPS  technology  -  all 
regardless  of  the  manufacturer  fe 
of  the  old  UPS.  In  addition,  con- 
sumers  benefit  from  substantial 
savings  on  many  APC  UPS 
accessories  when  purchasing 
them  along  with  the  new  UPS 

APC's  new  Charge-UPS  program  is  currently 
available  at  an  estimated  resale  price  range  of  $75 
to  $550.  APC  Trade-UPS  is  currently  available  in  the 
United  States  and  Canada. 


For  more  information  about  APC's  array  of 
Legendary  Reliability'"  products  and  services,  visit 
us  at  http://www.apc.com  or  call  the  number  below. 


Legendary  Reliability' 


Learn  more  about  which  APC  Charge-UPS®  program  is  right  for  you.  Visit  us  today! 

V\s\t:  http://promo.apc.com  •  Key  Code  c332y  •  Call  888-289-APCC  x6277  •  Fax  401-788-2797 

©2001  American  Power  Conversion.  All  Trademarks  are  the  property  of  their  owners.  APC1J1EP-US  •  PowerFax;  (800)  347-FAXX  •  E-mail;  apcinfo@apcc.com  •  132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


Server  Manaloemeiit 

Starts  Here... 
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ELECTRONICS 


Rose  Electronics  KVM  switches  aHtJvu^^single 
or  multiple  workstations  to  have  local  or  rStwQte 
access  to  multiple  computers  located  in  serv^ 
rooms  or  on  the  desktop. 


Rose  is  a  leading  KVM  switch  manufacturer 
with  the  most  complete  range  of  sepsw^k.,*^ 
management  products.  A  KVM  industry "^rv€fer, 

Rose  is  known  for  its  technically  superior  and 
price  competitive  products.  ; 

From  simple  access  to  complex  configurations, 

Rose  provides  easy  server  management 
solutions. 

Call  ROSE  today. 

Rose  Electronics 

1u  ’07  Stancliff  Rd.  Houston,  Texas  77099 

800-333-9343  281- 

USA  .  CANADA  .  ENGLAND  .  GERMANY  .  BENELUX  .  AUSTRALIA  >  SlNOAPOR£^ 


.ROSE.COM 
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Keep  iiwofiiiMKoirinp! 
Inform  us  immeiliiitel]i  ot 

www.nwwsubscribe.com 


Want  to  know  the  MOST 
read  articles  on-line? 
What  NOT  to  miss  on 
NetwoikWorld  Fusion? 


M  Best  Bets  mm 


Mid 


Check  out  our  new  Best  Bets  on  NW  Fusion 
—  found  right  on  our  home  page  at 

www.nwfusion.com 


Get  A  FREE 


Subscription! 


APPIYON-IINE  TODAY  AT: 

www.nwwsubscribe.com/pb  1 00 1 


Get  A  FREE 


Subscription! 


APPIYON-IINETODAYAT: 

www.nwwsubscribe.com/pb  1 00 1 


NEWSLETTERS 


Sign  up  for  any  or  all  of  our  free  technology 
specific  e-mail  newsletters.  Topics  include: 

■  High  Speed  LANs  ■  Network/Systems 

■  Security  Management 

■  Wireless  in  the  Enterprise  ■  Cisco  News  Alert 

Sign  up  today  at:  ■And  more! 


(^www.nwwsubs<ribe.<om/F0C270^ 
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When 

network  uptime 

is  your  life... 


your 

power  management 

solution  is  your  life  saver. 


Real  life  questions: 

How  much  power  is  my  equipment  using? 

Am  I  about  to  trip  the  circuit  breaker? 

What  is  the  temperature  of  my  cabinet? 

How  do  I  reboot  locked  servers  from  5000  miles  away? 


Real  life  answers 


BayTech  power  management  solutions  with  a  return  on 
investment  that  just  makes  sense. 


You  no  longer  need  to  be  there  to  reboot  locked  routers, 
SNMP  traps  are  generated  when  you  reach  your  circuits 
capacity,  and  power  measurement  is  instantaneous. 


Reducing  downtime  and  costs  is  no  longer  a  luxury,  its  a 
requirement.  With  BayTech  remote  site  management 
solutions  you  will  not  only  do  both,  you  will  always  have 
instantaneous  access  to  your  equipment,  anytime  from 
anywhere. 


New  Zero  U  Solutions 
with  up  to  20  receptacles 

per  unit  at  up  to  30  amps 


Horizontal  solutions  with 
direct  network,  serial,  or 

modem  access 


www.baytech.net 
1-800  523-2702 


NetworkWorld's 


Authorized  Reseller 

Buy  Sell  Lease  Repair 

New  Rejurbished  Used 

Routers  Nortel  DSU/CSUs 

Switches  Memory  3Com 

Hubs  ISDN 

1  800  553  0592 
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www.wdpi.com 

Email:  cisco6@wdpi.com 


Cisco  Systems 


Reseller 


f1  c  IB 

•  No  PDA  or  other  device  to  carry. 

•  Works  v/ith  your  SMTP  e-mail  or  Microsoft  Exchange. 

•  Requires  no  changes  to  your  e-mail  system  or  PBX. 

•  No  monthly  service  charges. 

800-843-1317  www.mailspeech.com  JSSIilli 
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Instant  e-mail  access  anytime,  anywhere. 
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Yes,  that's  right.  By  pulling  a  cable  or  two  GoCables 
has  done  it  again.  Aside  from  our  standard  and 
custom  cable  assemblies  we  now  offer  a  complete 
line  of  high  speed  Ethernet  solutions,  from  Fast 
Ethernet  Hubs  to  Cable  Routers.  To  help  you  get 
connected  we'll  throw  in  a  free  patch  cord  with 
every  networking  hardware  product  you  purchase 
at  www.gocables.com.  And,  of  course,  you  can 
expect  the  same  quality,  value,  and  support  that 
comes  with  all  GoCables  products. 
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More  Networking  Hardware 


PCMCIA 
IP  Routers 
Print  Servers 
Gigabit  Switch 


LAN  Adapters 
Switching  Hubs 
Fast  Ethernet  Hubs 
Fast  Ethernet  Cards 


(^Cables 

1-800-555-7176 


See 


us 


at 
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The  ultimate  solution  for  critical  space  environ¬ 
ments  -  based  on  cutting  edge  CATS  technology, 
The  Phantom  Specter  is  the  newest  addition 
to  the  Phantom  Line,  created  to  reduce  the  cable 
clutter  and  cost  associated  with  other  brands  of 
KVM  switches.  Utilize  valuable  rack  space  for 
^^orvers,  not  KVM  switches. 


Control  up  to  42  servers  with 
1  keyboard,  monitor  &  mouse 
'  Single  CATS  daisy-chain 
up  to  1 10  m/360  ft 
Eliminotes  KVM  cable  clutter 
ond  harnessing 
Pure  plug  and  play 
hardware  solution 
No  external  power  supply 


I  II  Rock  mountable  (only  ID) 

■Ls.?  888-486-2 1 54  for  the  whole  story  or  «  Advanced  OSD  management 

v&it  our  Website  at  www.minicom.com  and  security 


CJi^M 


414  North  Wood  Ave.,  Linden,  NJ  07036 
888-486-2154  •  Fox  908-486-7788 
www.minicom.com  •  usainfo@minicom.com 


PHANTOM 

Specter 


IMMEDIATE  AVAILABILITY 


Netfasf  Communications  Inc.,  56-29  56'*'  Drive,  Maspeth,  NY  1 1 378  USA 
Phone:  I  -888-892-4726  or  718-894-7500  Fax:  718-894- 1 573 
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Save  big  on  new/used:  >  Routers  >  Gigobit/FE/ATM  Switches 
>•  Access  Servers  >» Optkol  Networking  >-Wireless  BUY/SELL/RENT 


> CISCO  >-  Juniper  ►Lucent 

WWW.  digitalwarehouse.  com 

DIGITAL  WARIHOUSI 

Yaur  IntormUton  Superfiighway  Discount  Sources 


►  Nortel 

►  Foundry 

►  Extreme 


►  Marconi 

►  Adtion 

►  ( 


'  Quick  Eagle 
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Network  Products  and  Services  with  Network  World's 
Marketpiace.  Cali  800-622-1108  ext.  6507 


i  CISCO 

New  &  Used  ■ 

Fully  Guaranteed  s. h.bi.  EspaSoi  ■■■■■ 

800.451.3407 

Castilian  Drive.  Suite  1 10.  Santa  Barbara.  CA  93117 

Routers 
Switches 
Interface  Modules 
Access  Servers 
Accessories 

www.nctworkhardwarc.com 

BUY  ONLINE 


NETWORK  HARDWARE  RESALES! 


Get  More  for  Today's  Budget! 

Contact  BIZI 
to  SAVE  up  to  80% 

•  50-80%  Savings  off  Retail  List  Prices 

•  120-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 

•  Supplying  Quality  Networking  Prcxlucts 
for  Over  10  Years  with  In-House  Technical  Support 


Request  a  Quote  on-line  at: 

http://www.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 

Yoar  global  partnan  la  now  &  qualty 

We  Buy,  Sell,  Trade  and  Lease...  pra  awnod  networking  oquiiiinont 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FORE/MARCONI 


Solve  Your  Network 
Sync  Problems 
with  Wireless  CDMA 


NTP  Time  Server 

•  High  Performance 

•  Low  Cost 

•  Easiest  Installation  — 

No  antenna  hassle! 

EndRun 

TECHNOLOGIES 

www.endruntechnologies.com 

1-877-749-3878 


'ey  View  Cart  ^  Clear  Cart 


FACTORY  DIRECT 
FIBER  OPTIC  PRODUCTS 


Jumpers,  I’ij'luils,  Tcrniinatiun  Boxes, 
Preconnect ori/.ed  Bucivbnne  ('able. 
Mode  Conditioning  Cables, 
Ethernet  Converters  and  Switches, 
CATS  Products,  Photonic  Devices 


www.fibcrdync.com 


/IfIBERDYNE  labs,  INC. 

l-(80())  894-9694 
(.115)  895-8470 
Fax  (315)  895-8436 


Do  you  offer 
Training  or 
Educational 


Services? 


If  so,  call  Enku 
today  to  find  out 
how  to  place 
your  listing  in  our 
training  Directory. 


-800-622-1108 
exL  6465 
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Cable  University 

(800)  537-8254 
www.CabIeU.net 

FREE  online  training  in  network 
cabling  installation  &  maintenancej 

NetworkTraining.com 

(800)  NET-SKIL 
(800)  638-7545 

Network  Analysis  &  Tool  Training 
Certified  NetAnalyst  Testing 


BNETSYS  Inc. 

(800)  BNETSYS 
www.bnetsys.com 
Instructor  led  &  online  Cisco 
certification  training  @  no  charge 


m 


To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


Contact  these  companies 
today  to  help  you  with  your 
training  needs! 


For  more  information  on 


For  more  information 
on  advertising  in 
Network  World’s 
Marketplace  contact: 

Enku  Gubaie, 

800-622-1108  ext.  6465, 
egubaie@nww.com 


NEW 


USED 


AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MuItTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
vwvw.wrca.net 
800-699-9722 
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Why  Are  We  The  Best? 


•  Nortel  Service  Contracts  •  Next-Day  Hardware 

•  Nortel  Service  Renewals  Replacement 

•  Free  Technical  Support  *  Competitive  Prices 

•  Good  As  New  Oar, 

Same  as  New  Warranty 
-  at  Better  Than  New  Prices 

Refurbished  Specials: 

BayStack  450-24T  (AL2012EI4)  with  MDA  Port 

10/100/1000  BT  Autosense  Ssvitch  , 

Limited  Lifebme  Warranty 

Special  $995 

List  S2.69S 

BLN-2  Router  Base  Unit  (71000)  -  Complete 

Includes  Dual  AC  Power  Supplies  and  SRML 

Special  $1,999 

List  $12,700 

BCN  Router  Base  Unit  (73000)  -  Complete 

Indudes  Dual  AC  Power  Supplies  and  SRML 

Special  $2,999 

List  $18,150 

ARN  8  MB  Ethernet  Router  Base  Unit  (CV1001003) 

Other  Memory  Config  and  modules  avalible.  Call  now  for  pricing. 

Special  $295 

List  $1,134 

Dont  want  used?  Try  our  low  prices  on  new!  Call  Today! 

Call  for  Free  Quote!  MMimttim  ^ 

888-8LANWAN 

(888-852-6926) 


National  LAN  Exchange  •  WWW.nle.com 
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IT  CAREERS 


Advertising  Supplement 

IT  Careers  in  Web  Development 


Over  the  past  four  years,  the  primary  focus  of 
web  applications  and  development  was  on  basic 
operation  -  getting  a  site  up  and  running  and 
providing  data  and  information  to  conduct  business. 

That's  changed  somewhat  with  the  turn  of  the  century.  More  and  more, 
businesses  are  looking  for  additional  flexibility  and  power  within  their 
applications. 

David  Renaud,  executive  vice  president  of  development,  chief  technology 
officer  and  co-founder  of  Satmetrix  Systems  in  Mountain  View,  CA,  says 
his  company  has  long  been  committed  to  developing  web-enabled 
software  that  measures,  analyzes  and  allows  companies  to  improve 
customer  satisfaction  over  time.  "Satmetrix  Systems  embeds  market 
research  techniques,  best  practices  and  benchmark  information  in  its 
software  to  provide  the  most  accurate  and  timely  insight  available," 
explains  Renaud.  "Now,  we're  enhancing  the  self-administration  capabili¬ 
ties  of  our  software  so  that  web-reporting  sites  for  customers  provide 
greater  freedom  to  navigate  and  control  the  system  from  their  end." 

While  usability  is  one  facet,  Renaud  says  customers  also  are  looking  for 
additional  features  that  broaden  the  scope  and  power  of  applications. 

"Our  client  users  are  now  translating  customer  comments  from  customer 
satisfaction  surveys  into  various  languages  so  that  the  information  can  be 
presented  to  different  audiences,"  he  explains.  "For  example,  a  survey  is 


conducted  in  a  native  language,  say  French. The  company's  director  of 
customer  service  can  translate  the  comments  into  English,  using  the 
software,  and  present  the  data  to  managers  who  might  be  based  in  the 
United  States  and  use  English  as  their  first  language." 

Renaud  says  Satmetrix  Systems  has  three  functional  areas  for  IT  careers: 

1)  overall  web  globalization  management;  2)  production  of  web  sites  using 
FITML  and  XML  skills,  Java  script,  graphics  and  multimedia;  and  3)  back¬ 
end  or  infrastructure  of  web  sites  managing  servers  and  configuration, 
hardware  and  software. 

"Know  your  strengths  and  passions  and  follow  them" 

In  today's  IT  environment,  "know  your  strengths  and  passions  and  follow 
them,"  advises  Renaud.  "There  are  many  directions  you  can  pursue  in  web 
development,  but  you  should  pursue  those  that  come  most  naturally. 

Steel  yourself  with  the  right  kind  of  ongoing  training  and  education.  At 
Satmetrix  Systems,  you  have  the  chance  to  work  alongside  clients  repre¬ 
senting  the  blue-chip  companies  of  the  world,  from  Siebel  Systems  and 
PeopleSoftto  Cable  &  Wireless  and  Honda.  We  may  be  a  high  technology 
company,  but  what  makes  us  stand  out  is  our  people." 

For  more  job  opportunities  with  web  development  firms,  turn  to  the  poges 
of  ITcoreers. 

•  If  you'd  like  to  take  port  in  on  upcoming  ITcoreers  feature,  contact 
Janis  Crowley,  650.3)2.0607  or  janis_crowley@itcareers.net. 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 


THE  BEST  MINDS.  THE  BEST  OPPORTUNITIES. 


JOIN  A  SYSTEMS  TEAM 

•  THAT  HAS  REVOLUTIONIZED  = 

AN  ENTIRE  INDUSTRY. 

Fidelity  Investments  maintains  the  industry's  most  advanced  technology 
infrastructure.  But  it's  our  people  who  are  our  most  important  asset.  Our 
systems  professionals  are  among  the  best  and  brightest  in  the  field. 
They  thrive  on  our  unyielding  commitment  to  technology,  creating  a 
culture  of  continuous  improvement  and  significant  achievement.  If  you'd 
like  to  be  part  of  it,  invest  in  a  systems  career  at  Fidelity  today. 


OPPORTUNITIES  AVAILABLE  IN  BOSTON  AND  MARLBOROUGH,  MA;  MERRIMACK,  NH; 
SMITHFIELD,  Rl;  NEW  YORK,  NY;  COVINGTON,  KY;  DALLAS,  TX;  AND  SALT  LAKE  CITY,  UT 


Some  of  the  Positions  Available: 

•  Web  Developers  — Job  Code:  CL1071 

•  Client/server  Developers  — Job  Code:  CL1072 

•  Senior/Consultani/Principal  Software  Engineers  - — Job  Code:  CL1073 

•  Lead  Software  Engineers/Project  Managers  — Job  Code:  CL1074 

•  Oracle/Sybase  Administrators/Analysts/Developers  — Job  Code:  CL1075 

•  Analysts  -  Systems/Security/Business  — Job  Code:  CL1076 

•  SQA  Engineers  — Job  Code:  CL1077 

•  Network  Engineers  — Job  Code:  CL1078 

•  Systems  Administrators  (NT  and/or  UNIX)  — Job  Code:  CL1079 

HOW  TO  RESPOND:  For  best  response,  apply  online  by  visiting  our  Web  site  at 
fidelity.com/jobs  and  creating  a  personal  profile  in  Job  Finder.  Or,  paste  your  resume 
into  an  e-mail  message,  indicating  Job  Code,  and  send  it  to:  resumes@fidelity.com. 
No  attachments,  please.  Or,  mail  your  resume  to:  Fidelity  Investments,  Resume  Central 
(Indicate  Job  Code),  82  Devonshire  Street,  Mail  Zone  H8C,  Boston,  MA  02109. 

BENEFITS:  Three-part  capital  accumulation  plan  with  401  (k)  •  Comprehensive  health /dental 
insurance  •  Emergency  backup  childcare  •  Life  insurance  program  with  investment  options 
•  Company-paid  pension  plan  •  Programs  for  working  families  •  Tuition  reimbursement 


For  ADDITIONAL  OPPORTUNITIES  NATIONWIDE.  PLEASE  VISIT  OUR  WEB  SITE  AT: 


EOE 


Opportunities  with 
ThinkSpark 

We're  always  looking  for  experi¬ 
enced  database  administrators, 
enterprise  application  consultants, 
developers,  designers  and  in¬ 
structors.  We  hire  self-motivated 
team  players  that  have  strong 
communication  skills,  technical 
expertise  and  leadership  potential. 

We  have  offices  in  Atlanta,  Austin, 
Boston,  Cleveland,  Dayton, 
Dallas,  Denver,  Fort  Worth, 
Houston,  Las  Vegas,  Oklahoma 
City,  Omaha,  San  Antonio  and 
Tulsa.  Relocation  and  some 
travel  may  be  required. 

Call  us  at  (888)  511-7837  or 
send  us  an  e-mail  at 
careers@thinkspark.com. 


Information  Technology 

Cap  Gemini  Ernst  &  Young  U.S. 
LLC  is  currently  seeking  individ¬ 
uals  to  fill  Consultant  and 
Manager  positions  In  multiple 
locations  nationwide  and  in 
Cailfornla  including  the  Orange/ 
L.A.  counties  area  and  the 
San  Francisco  Bay  area.  Please 
send  resumes  to:  dept50619 
@  cgeycareers.com. 


Call  your 

ITcareers  Sales  Representative 
or  Jams  Crowley. 
l-8(X)-762-2977 


the  place  where  your  fellow  readers 
are  getting  a  jump 
on  even  more  of 

the  world's  best  Jobs. 

Stop  in  a  visit. 

See  for  yourself. 
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Your  best  investment 


is  your  professional  network. 


will’s  2001 

Professioimal  Womem’s 
SiJiviiviiT  &  ExposmoiM 


October  24-25,  2001 

Hynes  Convention  Center  ▼  Boston,  MA 

For  more  information,  conference  package  pricing  or  to  register  for 
the  Professional  Women's  Su/wmit  please  visit  us  at 
www.witi.com  or  call  toll-free  800.3  34. WlTl 

will  offers  a  dynamic  2-day  accelerated  program  that  will  provide  every  professional  women  with  the  essential  tools, 
opportunities,  insights  and  connections  to  achieve  her  goals.  Take  advantage  of  this  unique  occasion  to  network  with 
top  leaders  and  visionaries  utilizing  technology  to  succeed. 

Over  the  course  of  2  days  you  will  be  offered; 

►  Powerful  keynote  sessions 
►  Practical  skill-building  workshops 
►  Dynamic  roundtable  discussions 
►  Highly  interactive  panel  discussions 
►  Networking,  Networking,  Networking. 

I  have  learned  so  much  about  myself,  my  environment,  and  the  people  that  work  with  me  and 
live  with  me  from  this  WITI  Conference.  The  only  thing  that  I  can  say  is  that  as  a  professional 
woman  in  any  technological  or  business  field,  you  MUST  attend  this  conference! 

Kathrine  Roberts,  Mainframe  Programmer,  West  Corporation 

Sign  up  for  the  Boston  Conference  before  September  21,  2001 
and  receive  a  ^200  discount  off  the  at-the-door  price. 
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Dissecting  the 
Windows  2000  Server  Exam 


The  Installing,  Configuring  and  Administering  Microsoft  Windows  2000  Server  exam  (#70-215)  became  available  in 
June  as  a  requirement  in  the  Windows  2000  MCSE  certification  track.  As  of  Fall  2000,  it  does  not  employ 
adaptive  testing,  but  is  a  standard  exam  with  a  large  number  of  verbose  questions.  It  is  administered  through  both 
Virtual  University  Enterprises  (www.vue.com)  and  Prometric  (www.2test.com)  testing  centers  and,  like  all  Microsoft  exams, 
costs  $  1 00  to  take.  Part  1  addressed  Exam  Specifics  and  the  first  two  of  the  seven  test  objectives,  with  this  one  focusing  on  the  other  five  objectives. 
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Hardware  Devices  and  Drivers 

Windows  2000  fully  supports  Plug  and  Play  devices. 

With  Windows  2000,  a  vendor  of  a  third-party  product  is  encouraged 
to  submit  the  drivers  and  operating  system  files  (.dll,  .exe,  .fon,  .ocx, 
.ttf,  .sys)  to  Microsoft.  If  Microsoft  can  verify  that  the  files  do  not 
behave  erratically  or  cause  system  problems  or  identifiable  failures, 
Microsoft  signs  the  file  digitally.  When  an  administrator  or  user 
attempts  to  install  a  new  component  on  her  system,  the  system 
automatically  looks  for  the  signature.  If  it  does  not  find  a  signature,  a 
dialog  box  appears,  prompting  the  user  to  decide  whether  or  not  she 
wants  to  continue. 

By  default,  a  system  always  looks  for  a  driver  signature;  this  feature  is 
known  as  System  File  Protection.  The  driver  signature  is  ignored  only 
when  the  user  is  using  one  of  the  following  programs: 

I  Hotfix.exe 

■  Update.exe 

■  Windows  Update 

■  Winnt32.exe 

These  files  are  needed  to 
install/repair  all  or  portions  of 
the  operating  system  and  thus 
the  driver  signature  is  ignored  for 
them. 

The  SIGVERIF.EXE  utility 
looks  for  files  that  are  not  digitally 
signed.  You  can  also  customize 
the  verification  options:  By 
default,  signature  verification 
search  results  go  to  the  log  file 
SIGVERIF.TXT  and  you  are 
notified  when  unsigned  files  are 
found  during  searches. 

SFC.EXE  is  used  to  automatically 
verify  system  files  after  a  reboot  to 
see  if  the  system  files  were 
changed  to  unprotected  copies. 

Unprotected  files  are  over-written 
by  stored  copies  of  the  system 
files  from  %systemroot%\sys- 
tem32\dllcache  (%systemroot%  is 
the  folder  into  which  the  operat¬ 
ing  system  was  installed).  SFC 
can  be  run  only  by  users  with  the 
Administrator  group  permissions. 


It  also  requires  the  use  of  a  parameter.  Valid  parameters  are  shown  in 
Figure  3. 

System  Performance 

Two  new  runlevels/ priorities  have  been  added  to  processes,  making  the 
possibilities,  from  lowest  to  highest:  Low,  BelowNormal,  Normal, 
AboveNormal,  High,  Realtime.  The  only  way  to  change  the  priority  of  a 
running  process  is  via  Task  Manager,  which  has  also  been  enhanced 
with  an  “End  Process  Tree”  option.  The  only  way  to  start  a  process  at 
a  priority  other  than  its  default  is  to  use  the  Start  command  line  utility. 

Windows  2000  uses  the  term  “System  State  data”  to  refer  to  all  the 
components  the  operating  system  needs  to  function.  The  “System 
State  data”  on  Windows  2000  Professional  is  much  smaller  (a  subset) 
than  the  “System  State  data”  needed  on  Windows  2000  Server.  On 
Professional,  this  includes  only  Boot  (including  system)  files,  the 
Registry  and  COM+  database  files.  On  Server,  this 
includes  those  entries  plus  Certificate  Services  data¬ 
base,  SYSVOL  directory.  Active  Directory  and  any 
cluster  information. 

The  Backup  utility-accessible  under  Start, 
Accessories,  System  Tools-performs  backups  and 
restores,  as  well  as  allows  you  to  interact  with  the 
Task  Scheduler  to  schedule  jobs  and  make  the 
Emergency  Repair  Disk.  No  longer  limited  to  backing 
up  only  to  tape,  it  can  write  to  any  media. 

Storage  Use 

The  Computer  Management  snap-jn  can  be  found 
under  Administrative  Tools  and  is  divided  into  three 
sections:  System  Tools,  Storage  and  Services  and 
Applications.  The  Storage  component  provides  the 
basis  for  working  with  disk  devices  and  is  subdivided 
into  four  other  sections: 

■  Disk  Management 
I  Disk  Defragmenter 

■  Logical  Drives 

■  Removable  Storage 

The  heart  of  this  section  of  the  exam  objectives 
resides  in  the  Disk  Management  tool,  and  you  must 
be  a  member  of  the  Administrators  group  to  access 
this  tool.  Replacing  the  Disk  Administrator  utility 
from  Windows  NT,  Disk  Management  surpasses  that 
tool  in  that  it  now  allows  for  remote  disk  management, 
supports  dynamic  volumes  (except  on  fxjrtable  computers). 


Figure  3:  Valid  SFC'parameters 

/CACHESIZE= 

Sets  the  size  of  the 
file  cache 

/CANCEL 

Stops  all  checks 

/ENABLE 

Returns  to 
normal  mode 

/PURGECACHE 

Clears  the  cache 

/QUIET 

Replaces  files 
without  prompting 

/SCANBOOT 

Checks  system  files 
on  every  boot 

/SCAN  NOW 

Checks  system 
files  now 

/SCANONCE 

Checks  system  files 
at  next  boot 
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offers  wizards  for  many  choices  and  allows  you  to  make  a  great  many  changes 
on-the-fly — without  requiring  a  reboot  to  be  active.  Microsoft  has  changed  its 
standard  for  storage  significantly  with  the  release  of  Windows  2000  by  turning  to 
dynamic  storage.  The  entire  disk  must  first  be  converted  to  dynamic  storage,  then 
you  can  create  and  alter  volumes  without  ever  needing  to  shutdown  and  restart  the 
system  for  the  changes  to  take  effect.  By  default,  every  disk  starts  as  the 
basic  type,  but  can  be  upgraded  to  dynamic  (unless  it  is  removable). 

When  dynamic,  the  pop-up  menu  for  each  volume  contains  the  same 
choices  as  those  for  basic,  plus  the  following  options  as  well: 

■  Extend  Volume.  This  option  allows  you  to  dynamically  change 
the  size  of  the  volume  (available  only  on  NTFS  volumes).  If  the 
volume  was  originally  created  on  a  basic  disk,  it  cannot  be 
extended.  If  the  volume  was  first  created  on  a  dynamic  disk,  it 
can  be  extended. 

I  Add  Mirror.  With  this  option,  you  can  enable 
fault  tolerance  via  mirroring  if  more  than  one 
drive  is  installed. 

H  Reactivate  Volume.  This  option  is  available  only 
if  the  volume  is  not  currently  activated. 

H  Delete  Volume.  This  option  forces  the  loss 
of  all  data  and  the  space  becomes  unallocated. 

Within  Disk  Management,  there  are  two  frames:  the  top  frame  shows 
each  volume,  its  file  system,  status  and  capacity,  while  the  bottom  frame 
shows  each  disk— including  the  CD-ROM  and  the  volumes  on  it. 
Windows  2000  also  includes  a  disk  defragmenter-a  menu  option  that 
appeared  in  previous  versions  of  the  operating  system— but  it  could 
never  be  selected  because  no  such  utility  was  included  with  the  core 
operating  system. 

Quotas  can  be  configured  only  if  the  drive  is  NTFS.  They  allow  you  to 
configure  the  storage  limits  for  users.  By  default,  quota  management  is 
not  enabled;  it  must  be  enabled  before  any  other  options  can  be  set. 
The  check  box  labeled  Deny  Disk  Space  to  Users  Exceeding  Quota 
Limit  prevents  users  from  saving  their  files;  when  the  option  is  not 
checked,  users  merely  get  a  warning.  With  the  last  two  options,  you  can 
specify  what  happens  when  a  user  exceeds  the  limit;  the  program  can 
log  events  or  give  warnings.  (These  two  values  can  be  configured 
independently  of  one  another). 

Network  Connections 

No  longer  just  one  of  multiple  protocols  that  you  can  choose,  TCP/IP 
is  now  the  required  protocol.  It  is  required  for  all  the  features  new  to 
Windows  2000  that  rely  upon  Active  Directory  and  other  services. 
TCP/IP  can  have  host  names  resolved  to  IP  addresses  with  the  use  of 
DNS  servers  (which  now  interact  with  WINS  servers),  and  can  have  IP 
addresses  automatically  issued  through  the  use  of  DHCP  servers.  In  the 
absence  of  DHCP  or  manual  addressing,  Windows  2000  uses 
Automatic  IP  Addressing  to  assign  hosts  addresses  in  the  I69.254.x.x 
range. 

Besides  TCP/IP,  there  is  also  support  for  (but  not  default  installation 
oO  four  other  protocols: 

H  NetBEUI  —  for  older  Microsoft  clients. 

H  NWLink  —  for  communication  with  NetWare  servers. 

H  AppleTalk  -  for  Macintosh  clients. 


I  DLC  -  for  communicating  with  mainframes  and  older  network 
printers  (newer  network  printers  use  TCP/IP). 

There  are  two  protocols  to  use  for  creating  Virtual  Private  Networks 
(VPNs): 

B  PPTP  —  Point-to-Point-Tunneling  Protocol.  This  one  was  included 
with  NT  4.0  and  is  an  expansion  of  the  PPP  protocol.  This 
protocol  uses  MPPE  encryption. 

B  L2TP  —  Layer  2  Tunneling  Protocol.  New  to  Microsoft  operating 
systems,  it  is  not  new  at  all,  having  been  used  by  other  vendors 
for  years.  IPSec  is  the  encryption  it  utilizes. 

Security 

The  Encrypting  File  System  (EFS)  allows  you  to  toggle  an  attribute  for 
a  file  or  folder  just  as  you  would  any  other,  and  it  protects  the  contents. 
If  the  object  you  select  is  a  folder,  all  contents  of  the  folder-files, 
subfolders  and  so  on— also  become  encrypted.  Files  that  are  pasted  into 
an  encrypted  folder  become  encrypted  as  well,  but  files  that  are  placed 
in  the  folder  with  drag-and-drop  do  not  become  encrypted  automatically. 

In  order  to  use  EFS,  the  file  system  must  be  NTFS  and  the  files  must 
not  be  compressed.  Some  files-system  files  in  particular-cannot  be 
compressed  no  matter  what  other  conditions  exist.  If  you  move  or  copy 
an  encrypted  file  to  one  of  these  partitions,  it  automatically  becomes 
unencrypted. 

From  the  time  a  file  is  encrypted,  a  digital  code  associated  with  the  user 
(encryption  certificate)  is  assigned  to  it.  This  allows  the  encrypting  user  to 
open  and  work  with  the  file  exacdy  as  if  it  were  unencrypted,  but  prevents 
anyone  else  from  doing  so.  Because  the  file  can  only  be  opened  by  the 
encrypting  user,  this  makes  EFS  perfect  for  personal  data,  but  unusable  on 
any  data  you  want  to  share. 

You  can  use  the  Export  command  in  the  Certificates  snap-in  to  copy 
your  file  encryption  certificates  to  another  location-such  as  a  floppy 
drive.  Doing  so  will  allow  you  to  unencrypt  your  files  in  the  event  of  a 
restore  operation  being  necessary  after  a  media  failure  (at  which  time 
you  can  use  the  Import  command  to  bring  them  back  from  the  floppy). 

Group  Policies  and  the  Group  Policy  Editor  (gpedit)  are  new  and  exclusive 
to  Windows  2000.  For  Windows  NT  and  9x  clients,  you  must  still  use 
System  Policies,  which  can  be  created  with  the  System  Policy  Editor 
(poledit). 

Summary 

The  objectives  for  the  Windows  2000  Server  exam  cover  a  lot  of 
ground.  While  appearing  to  walk  through  all  the  features  of  the  oper¬ 
ating  system,  they  truly  focus  on  those  items  that  are  new.  With  a  little 
studying,  and  a  lot  of  hands-on  experience  with  the  operating  system, 
you  will  be  able  to  pass  this  exam  and  be  well  on  your  way  to  being 
certified  as  a  Windows  2000  MCSE.  B 

For  more  information  on  Part  I  of  “Dissecting  the  Windows  2000  Server 
Exam"  please  refer  to  the  9/24/01  edition  of  Computer  World,  Info  World 
and  Network  World, 


For  information  on  Advertsing  in  the  the  ITCareerssection  please  contact: 
Janis  Crowley,  650.312.0601  orjanis_crowley@itcareers.net. 

Produced  by:  Text  taken  from  the  November  2000  issue  of  CertMag's  StudyCuide, 
www.certmag.com. 


Computerworld  •  InfoWorld  •  Network  World  •  October  1, 2001 


With  a  deep  line-up  of  print,  web  and  event- 
driven  products,  IDG  Recruitment  Solutions 
can  deliver  solid  results  with  record  speed. 


This  is  the  way  to  integrate  your  recruitment 
efforts  moving  your  message  to  your  target 
audience  across  several  platforms-with 
maximum  efficiency  and  effect. 
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picking  up  the  phone. 
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SOFTWARE  ENGINEERS:  Re¬ 
sponsible  for  software  integration 
and  external  interface  develop¬ 
ment.  Use  combination  of  Oracle 
PL-SQL,  CASE  tools  and  Peo- 
pleSott  under  Oracle  8.x  envi¬ 
ronment  to  develop,  create, 
rrtodify  and  maintain  application 
software  and/or  utility  modules 
for  DoD  HRMS  application. 
64K-72K(F-T;  40hr/wk):  New 
Orleans,  LA;  B.S.Computer 
Science  (or  equivalency);  4  yrs 
experience  or  related  experience 
in  ERP  package  customization. 

Contact:  Kenneth  Burkhalter 
personnel@otisinc1  net 
Tel  :  (985)781-3892 


Systems  Analyst  Programmer 
w/  expertise  in  SAP.  Contact 
Resource  Spectrum  5050 
Quorum  Drive,  #700,  Dallas, 


TX,  75240  or  fax  (972)243- 
0120  or  contact  www. 


spectrumm.com. 


♦ 


Programmer  Analyst,  Software 
Engineers  and  Database  Analysts 
Various  client  server  and 
RDBMs  Technologies  including 
Reporting  and  Logistics  analysts 
and  OOPS  analysts  Variable 
locations  in  Dallas/Fortworth 
and  Houston  metro  areas. 
Contact:  Praveen  Panchakaria 
Prudent  Technologies  &  Con¬ 
sulting  Inc.  10940  Meadowgien 
Lane  #475  Houston,  TX  77042 


Columbine  Health  Care  Systems, 
Greeley,  CO,  seeks  to  fill  the 
positions  of  Software  Engineer 
and  Programmer  Analyst  (Multiple 
Openings).  Must  have  BS  degree 
in  Computer  Science  or  equiva¬ 
lent  &  2  yrs  exp.  Respond  by 
resume  to  HR  CJ,  822  7th 
Street.  Suite  630,  Greeley,  CO 
806301 . 


♦ 


Programmer  Analysl  (SAP 
Systems).  Conduct  needs  analy¬ 
sis  &  determines  information 
system  requirements  in  account¬ 
ing  &  financial  areas.  Design, 
develop  &  upgrade  systems. 
Install  &  maintain  software  & 
servers.  Develop  &  implement 
testing  procedures,  provide  tech¬ 
nical  documentation.  Job  Duties 
to  be  performed  in  MS  SQL 
&  Windows  NT.  Req:  Master 
Degree  in  Computer  Science  or 
Engineering.  40-hr  wk.  Job/ 
Interview  Site:  El  Segundo,  CA. 
Send  resume  to  Supply  Access, 
Irx;.  300  continental  Blvd,  #200, 
El  Segundo  CA  90245. 


Software  Engineer.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Research,  design 
and  develop  computer  software 
systems  in  conjunction  with 
hardware  product  development. 
Analyze  software  requirements 
to  determine  feasibility  of  design 
within  time  and  cost  restrains. 
Consult  with  clients  to  define 
needs  or  problems.  Use  of 
COBOL,  JCL,  VSAM,  DB2,  IMS. 
OS/400  and  MVS.  Reqs.  Master's 
or  equivalent  in  Computer  Scierx* 
or  related  field  of  study.  Plus  1 
year  in  the  job  offered  or  1  year 
in  a  related  occupation  such  as 
a  Programmer  Analyst.  $66,058/ 
year,  40/hrs/wk,  8:30AM-5PM. 
Respond  by  resume  to  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  Programs. 
ATTN:  Jim  Shimada,  Two  Park 
Central,  Suite  400,  1515  Arapa¬ 
hoe  St.,  Denver,  CO  80202  and 
refer  to  Job  Order  No.  CO 
5005488. 


User  Support  Specialist  -  provide 
technical  assistance  in  connection 
with  computer  software,  hardware 
and  systems  to  the  faculty, 
students  and  staff  and  to  the 
molecular  biological  research 
laboratory.  Investigate,  interpret 
and  resolve  problems  with  cable 
modem  support,  computer 
configurations,  servers,  hardware, 
application  software,  complex 
databases  and  computer 
controlled  peripherals.  Resolve 
problems  by  upgrading,  installing, 
performance  tuning,  applying 
and  documenting  patches  and 
transaction  logging  for  SQL 
databases.  Bachelor  degree  in 
computer  information  systems. 
Prevailing  salary.  Apply  by  mall 
only:  CalTech,  PROV3138, 1200 
E.  California  Blvd.,  Mall  Code 
4-11,  Pasadena,  CA  91125. 
CalTech  is  an  A/VEOE.  Women, 
minorities,  veterans  &  disabled 
persons  are  encouraged  to 
apply. 


F/T  Sr.  Software  Engineer. 
Resp.  for  designing,  implementing 
&  developing  components  for 
company's  manufacturing  prod¬ 
ucts.  Analyze  high-level  product 
specifications  &  detail  design 
documentation  &  procedures  for 
application  development  & 
architecture  specifications  in 
client-server  environment  using 
C,  C++,  MFC,  Unix,  Perl,  Java, 
JavaScript,  Access,  VB,  VB 
Script,  Oracle,  SQL,  IE  5.0, 
ASP,  ActiveX  controls,  QDBC 
&  COM/DCOM.  Must  have 
Bachelor's  degree  In  Computer 
Science  or  related  field.  Foreign 
degree  equivalent  accepted. 
Must  have  4  yrs.  exp.  In  job 
offered  or  position  w/  same 
duties.  Salary:  $90,000.  Send 
resume;  Jim  Pearce,  THRU-PUT 
CORPQRATION,  2099  Gateway 
Place.  Suite  240,  San  Jose,  CA 
95110. 


♦ 


Professional  Data  Management 
Again,  Inc.,  providing  consulting 
services  to  the  insurance/financial 
industry,  cunently  seeks  applicants 
for  the  following  position  in  its 
Indianapolis,  IN  location:  Senior 
Systems  Management  Integration 
Professional.  There  are  multiple 
openings  available  for  this  position. 
Applicants  for  this  position  must 
have  a  bachelor's  degree  in 
computer  science,  business  ad¬ 
ministration,  or  a  related  field 
and  at  least  five  years  progressive 
experience  in  IT  consulting,  test¬ 
ing,  or  implementation  in  the 
employer's  industry.  For  consid¬ 
eration.  please  forward  your 
resume  to:  PDMA,  Inc.,  attention: 
Eddie  L.  Brown,  9229  Delegates 
Row,  Ste.  240,  Indianapolis,  IN 
46240.  EOE 


Supervisory  Technical  Analysl, 
NorthbrrxJk,  IL.  Duties:  Design, 
develop,  &  implement  process 
solutions  to  meet  objectives  w/ 
in  the  capabilities  of  the  JD 
Edwards  ERP  System  &  institu¬ 
tional  systems.  Lead  the  model 
&  pilot  business  processes  to 
ensure  process  supports  all 
foreseeable  business  events. 
Lead  the  preparation  of  & 
execution  of  the  JD  Edwards 
implementations.  Document 
process  details  -  work  instructions 
to  be  used  as  on  line  help  & 
training  material.  Provide  post 
Implementation  support  &  main¬ 
tenance.  Utilize  RPG,  CLP,  &  a 
suite  of  development  tools  on  an 
IBM  AS400  background.  Reqs: 
Bachelor's  or  for  equiv  in 
Comp.  Sci.,  Mgmt,  or  a  closely 
related  field  &  2  yrs  exp  in  the 
job  offered  or  2  yrs  exp  as  a 
Comp.  Consultant.  Exp  which 
may  have  been  obtained 
concurrently,  must  include:  2 
yrs  exp  implementing  pack¬ 
aged  software,  specializing  in 
JD  Edward's  financials,  &  1  yr 
exp  utilizing  RPG,  CLP,  &  the 
suite  of  development  tools  on 
an  IBM  AS400  background. 
Mail  resume  to:  Rickeia 
Lessig,  Phoebus  Corp.,  2315 
Sanders  Rd.,  Northbrook,  IL 
60062-6145. 


Software  Developer,  Northbrook, 
IL.  Duties:  Translate  automotive 
&  fleet  mgmt  Issues  into  internet 
applications  to  meet  business 
needs  using  MS  SQL  Server 
database  on  Windows  NT  plat¬ 
form.  Develop  Internet  applica¬ 
tions  using  Java  servlets,  HTML, 
&  JavaScript  -  using  SQL  for 
database  access.  Interact 
w/  sales  force  to  explain  & 
train  salespeople  on  comp, 
applications.  Gather  application 
requirements  directly  from  client 
&  business  personnel,  &  other 
fleet  mgmt  companies.  Code 
automotive  &  fleet  mgmt  info, 
correctly  into  comp,  applications. 
Develop  &  test  new  systems. 
Reqs:  Bachelor's  or  for  equiv 
in  Comp.  Eng.,  Comp.  Sci.,  or 
a  closely  related  field  &  2  yrs 
exp  in  the  job  offered  or  2  yrs 
exp  as  a  Comp.  Consultant. 
Exp  which  may  have  been 
obtained  concurrently,  must 
Include:  2  yrs  exp  In  develop¬ 
ing  internet  applications  using 
Java  and  JavaScript,  utilizing 
SQL  databases,  &  developing 
web  applications  which  oper¬ 
ate  on  Windows  NT  operating 
bases.  Mail  resume  to:  Rickeia 
Lessig,  Phoebus  Corp.,  2315 
Sanders  Rd.,  Northbrook,  IL 
60062-6142. 


Raheel  Foods,  Inc.  has  an 
opening  for  a  web  analyst/ 
administrator  for  its  office  located 
in  Walled  Lake,  Michigan.  The 
position  requires  a  Bachelor's 
Degree  In  Electronics,  Commu¬ 
nications  or  Computer  Engi¬ 
neering.  Send  resume  to  Sved 
Raheel,  President.  Raheel 
Foods  Inc.  22900  Ventura  Blvd., 
Suite  240,  Woodland  Hills,  CA 
91364. 


SAP  Business  Information 
Warehouse  (BW)  company 
seeking  experienced  SAP  BW 
functional/technical  consultants 
familiar  with  generic  and  custom 
extractors,  data  modeling,  info 
sources  and  info  cubes.  Also 
seeking  SEM  and  Supply  Chain 
Management/APO  experience. 
Please  e-mail  resume  to  Busi¬ 
ness  Information  Solutions  at 
recruiting@bisamerica.com  or 
fax  to  (858)  458-5819. 


The  Face  of  Pfizer 
The  best  is  getting  even  better! 
As  the  world's  largest  pharma¬ 
ceutical  research  enterprise. 
Pfizer  is  dedicated  to  providing 
the  best  innovations  in  medicine 
while  pursuing  tomorrow's  dis¬ 
coveries  in  research  and  devel¬ 
opment.  With  an  R&D  budget  of 
$4.7  billion,  our  team  has  spuned 
Pfizer's  exceptional  performance 
in  30  countries  and  across  six 
continents.  If  you  share  our 
dedication  to  discovering,  devel¬ 
oping  and  delivering  medicines 
to  improve  the  health  of  both 
people  and  animals  worldwide, 
we  want  yours  to  be  the  newest 
Face  of  Pfizer.  Picture  yourself 
in  the  following  opportunities  at 
Pfizer  Global  Research  and 
Development  facilities  in  Ann 
Arbor.  Michigan. 

Systems  Analyst/Sr.  Systems 
Analyst 

You'll  be  responsible  for  devel¬ 
oping,  maintaining  and  providing 
operational  support  for  our 
Phase  I  Management  System 
(PIMS);  developing  and  main¬ 
taining  applications:  and  offering 
technical  expertise  on  various 
applications/systems  supporting 
Clinical  Sciences.  Further,  you'll 
develop,  test,  validate,  and  pro¬ 
vide  change  management  of 
documentation  to  support  the 
applications;  provide  PC  hard¬ 
ware.  software  and  backup  sup¬ 
port  for  database  activities, 
write  ad-hoc  queries;  and  build 
custom  reports.  We  require  an 
MS  in  Computer  Science  or 
information  Systems  backed  by 
5+  years  experience  with  sys¬ 
tems  design  and  web  technolo¬ 
gy.  Demonstrated  proficiency  with 
Oracle  database  and  PL/SQ  is 
critical.  You'll  also  need  experi¬ 
ence  working  in  a  FDA  regulat¬ 
ed  environment,  as  well  as 
experience  with  SDLC  and  var¬ 
ious  operating  systems,  includ¬ 
ing  NT  and  UNIX.  Good  inter¬ 
personal  and  communications 
skills  are  essential. 

Pfizer  offers  an  exceptional 
work  environment  complete  with 
competitive  salaries,  exceptional 
benefits  and  training  opportunities 
designed  to  develop  your  pro¬ 
fessional  talents.  We  encourage 
all  applicants  to  apply  by  emailing 
your  resume,  indicating  the  appro¬ 
priate  Req.  #  01Aug0106578  in 
the  subject  field,  to  CPW@ 
pflzerresumes.com.  If  necessary, 
you  may  also  mail  your  resume, 
indicating  Req.  #,  to  Pfizer 
Resume  Processing  Center,  630 
Boston  Road  M-104,  Billerica, 
MA  01821,  Attn;  Softshoe 
Resumes.  An  equal  opportunity 
employer,  Pfizer  offers  a  work¬ 
place  rich  with  diversity  and 
potential. 


Chief  Information  Technology 
Officer:  directs  the  information 
and  data  integrity  of  the  enterprise, 
its  groups,  and  its  client  projects, 
for  all  IT  matters;  establishes  and 
directs  the  strategic  long-term 
goals,  policies  and  procedures 
for  the  IT  department;  determines 
long-term  system  needs  and 
hardware  acquisitions  to  accom¬ 
plish  objectives;  establishes, 
plans  and  administers  the  various 
software  development  projects: 
analyzes  client  requirements 
and  establishes  priorities  for 
feasibility  studies,  systems 
design  and  implementation  to 
develop  the  best  technology  or 
system  for  client's  needs,  and 
oversees  system  design,  archi¬ 
tecture  and  specification  devel¬ 
opment.  Requires:  bachelors 
or  equivalent  (foreign  degree 
through  3  or  4  year  program,  or 
through  combination  of  education 
and  experience)  in  computer 
science,  engineering,  math,  or 
similar;  8  years  of  relevant  expe¬ 
rience  with  min.  5  years  of 
Oracle  technology  experience  in 
relational  database  design, 
architecture  and  planning. 
Experience  requirements  may 
have  been  gained  concurrently. 
Position  based  in  Portland,  OR 
metro  area.  Applicants  must 
have  legal  authority  to  work 
permanently  in  the  U.S. 
Competitive  salary/DOE.  Send 
resume  to:  Human  Resources, 
Goshen  Technologies  Inc.,  1 500 
NW  Bethany  Blvd.,  #255, 
Beaverton  OR  97006 


Chief  Technicai  Officer,  40  Hours 
per  week,  8.30am-r.  :tripp'. 
$95,000.00  per  year,  located  in 
Boca  Raton.  R  Requires  a 
high  school  education  and  4 
years  experience  in  the  job 
offered  or  4  years  related 
occupation  as  senior  wireless 
network  specialist.  Report  to  the 
board  of  directors  on  the  day-to- 
day  running  of  the  company. 
Establish  budget  for  technical 
engineering  department.  Oversee 
development  of  high-level 
technical  strategies  and  project 
planning  for  the  implementation 
of  new  mobile  GSM  based  PCS 
networks.  Oversee  engineering, 
configuration  planning  and 
optimization  of  core  network 
elements,  including  mobile 
switching  centers,  home  location 
registers,  base  station  controllers 
and  base  transceiver  stations. 
Oversee  the  design  planning, 
engineering  and  optimization 
of  of  associated  transmission 
networks,  necessary  to  link 
geographically  distributed  net¬ 
work  elements  together  and  of 
peripheral  systems  associated 
with  the  core  mobile  network, 
including  network  management 
facilities,  operation  and  mainte¬ 
nance  centers,  signaling  and 
data  networks,  voicemail  sys¬ 
tems,  short  message  service 
centers,  advanced  intelligent 
networking  (AIN)  facilities,  billing 
systems  and  customer  care 
facilities.  Oversee  development 
and  definition  of  test  plans  for  the 
acceptance  and  integration  of 
network  elements  from  numerous 
suppliers;  and  oversee  provision 
of  technical  support/training  in 
each  of  the  above  areas,  as  well 
as  for  initial  software  deploy¬ 
ment,  upgrade  strategy  and 
database  engineering,  non-tech- 
nical  groups  in  the  design,  plan¬ 
ning  and  implementation  of  facil¬ 
ities  to  accommodate  network 
equipment,  subordinate  staff, 
marketing  and  other  business 
groups. 

Must  have  thorough  working 
knowledge  and  structure  of 
the  GSM  association;  The 
International  Telecommunications 
Union;  UMTS  and  3GPP  stan¬ 
dards;  GSM  specifications; 
ANSI41  Specifications;  GPRS 
Roaming.  Must  have  expert 
technical  writing  skills.  Send 
resume  to  Agency  for  Workforce 
Innovation,  P.01.  Box  10869, 
Tallahassee,  FL,  32302,  and 
RE:  JOFL  #2210926. 


Senior  Software  Engineer  sought 
by  interactive  television  and 
wagering  company  in  Broom¬ 
field,  CO.  At  a  senior  level,  engage 
in  full  life-cycle  software  devel¬ 
opment  of  software  applications 
that  employ  interactive  voice 
response  (IVR)  and  Computer 
Telephony  Interface  (CTI)  tech¬ 
nologies  and  incorporate  client/ 
server  architecture  and/or  are 
web-based.  The  applications 
interface  with  SQL/Server  rela¬ 
tional  database  management 
systems,  and  run  on  Windows 
NT  and/or  UNIX  operating,  as 
well  as  being  web-based.  Analyze 
requirements.  Create  designs  and 
design  documentation.  Code, 
test,  and  debug  the  software 
applications.  Engage  in  project 
management  as  required.  Use 
Visual  C++,  MFC,  ATL,  Socket 
programming,  the  COM/DCOM 
development  tool,  InstallShield 
software,  the  ActiveX  develop¬ 
ment  tool,  and  the  WIN  32API 
development  tool  in  the  design 
and  development  process.  Re¬ 
quires  Master's  or  equivalent  in 
Computer  Science  or  related 
field.  This  position  requires  a 
master's,  or  foreign  degree 
equivalent,  plus  three  years  of 
software  development  experience 
or  bachelor’s,  or  foreign  degree 
equivalent,  plus  five  years  of  soft¬ 
ware  development  experience; 
working  knowledge  of  IVR  and 
CTI  technologies.  Visual  C++, 
MFC.  ATL,  and  the  COM/DCOM 
development  tool.  $78,100.'yr, 
8am-5pm;  M-F.  Respond  by 
resume  to  James  Shimada,  CO 
Dept,  of  Labor  &  Employment. 
Tower  II.  #400,  1515  Arapahoe 
St.,  Denver,  CO  80202  &  refer  to 
Job  Order  No.  C05004481 
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i.'iad  Developer  Technical 
Specialist  (two  openings)  to 
reser  'r-h  new  technologies  & 
iTiethods  tor  company  &  our 
clients.  Will  define  business 
problems  for  our  clients  &  design 
&  manage  technical  solutions 
for  client  business  problems.  Will 
be  responsible  for  research, 
analysis,  design,  &  testing  of 
new  &  emerging  client/server  & 
web-based  technologies.  Will 
analyze  new  technologies  & 
create  specification  documents 
&  system  architecture  docu¬ 
ments  to  design  8  develop  new 
applications  8  systems.  Will 
develop  data,  functional  8  object 
models  for  system  architecture. 
Will  be  responsible  for  open 
systems  development  utilizing 
the  following  technologies:  C, 
C-f-f  ,  UNIX,  Windows  NT, 
Oracle,  Sybase,  PowerBuilder, 
Visual  Basic.  8  Neuron  Data 
among  ethers.  Requirements: 
M.S.  in  CS,  Elect.  Eng.,  or  Comp. 
Eng,  8  1  yr  experience  in  job  of¬ 
fered  OR  1  yr  experience  ana¬ 
lyzing  or  testing  new  8  emerg¬ 
ing  client/server  or  web-based 
applications.  OR,  in  the  alterna¬ 
tive,  B.S.  in  CS,  Elect.  Eng.,  or 
Comp,  Eng  8  five  (5)  years  ex¬ 
perience  in  job  offered  OR  five 
(5)  years  progressive  experience 
analyzing  or  testing  new  and 
emerging  client/server  or  web- 
based  applications.  Candidate 
must  also  possess  demonstrated 
expertise  in  client/server  appli¬ 
cations  development  using 
object-oriented,  object  modeling 
case  tools  8  methodologies; 
demonstrated  expertise  in  using 
the  PFC  object  library  classes 
for  PowerBuilder  applications 
development;  8  demonstrated 
expertise  in  POSQL  8  C++ 
for  implementing  rule  based 
engines.  Sal:  $73,140/yr;  9a-5p. 
Send  2  resumes  to: '  North 
Metro.  Job  Order  #  GA  7021673, 
2943  N.  Druid  Hills  Road, 
Atlanta,  GA  30329-3909,  or  the 
nearest  Department  of  Labor 
Career  Center  Office.  EOE. 
Applicants  must  have  proof 
of  legal  authority  to  work  in  the 
U.S. 


Sapiens,  a  leading  international 
provider  of  enterprise-wide 
e-business  solutions  for  the 
rapid  development  of  scalable, 
mission-critical  software  appli¬ 
cations,  has  openings  in  Cary  , 
NC.  Both  positions  require  25% 
travel. 

Sr.  Technical  Consultant  - 
Requires:  Degree  in  Computer 
Science,  Engineering  or  related 
field  or  equivalent  in  experience 
along  with  mainframe  program¬ 
ming  experience,  customer 
training,  sales  support,  system 
analysis  and  design  experience. 

Sr.  UNIX  System  Administrator- 
Requires:  Degree  in  Computer 
Science,  Engineering,  or  related 
field  Unix,  Sun,  Perl,  Korn  Shell, 
RS/6000,  C,  C-M-.Oracle,  Informix, 
and  Local  Area  Networks  and 
Firewall  design 

Forward  resumes  in  HTML  or 

Plain  Text  -no  Attachments-  to: 
resumes  @  sapiens.com 

PRINCIPALS  ONLY  and 
NO  PHONE  CALLS 

Generous  benefits  and  com¬ 
petitive  compensation  package. 

EOE//kA,  M/F/D/V,  Principals 


HealthGate  Data  Corp.  has 
openings  in  its  Burlington.  MA 
office  for  XML/ASP  Developers 
who  have  at  least  3  years  of 
exper.  developing  software,  incl. 
exper  w/  ASP.  Visual  InterDev 
amd  XML.  Interested  candidates 
should  send  resume  to  Req# 
DGP2001 .  Tammy  Caron.  Human 
Resources  Manager,  HealthGate 
Data  Corp.,  25  Corporate  Dr., 
Suite310.  Burlington.  MA 01803. 


Software  Engineer  Positions  in 
New  York  area: 

Develop  complex,  multi-tiered 
applications,  especially  Internet 
applications  8  to  design  and 
troubleshoot  at  all  stages  of 
development.  Interact  w/customer 
to  understand  8  deal  w/any 
potential  complications  or  special 
requirements.  Formulate  8 
develop  application  design  using 
object  oriented  analysis  8 
design  techniques,  develop  8 
deploy  the  design  under  operating 
systems  UNIX  or  NT,  as  well  as 
conduct  application  engineering 
8  assist  customers  in  writing 
applications  using  assorted 
tools.  Some  travel  may  be 
required.  Requires:  BS  or  equiv 
in  CS.  Engineering,  or  related 
field  8  2  yrs  exp  in  position  of¬ 
fered  or  related.  Sr  level  requires: 
Master’s  degree  in  CS,  Engi¬ 
neering,  or  related  field.  A  BS 
degree  8  5  yrs  of  post-bac- 
calaureate  progressive  exp  will 
substitute  tor  Masters.  Rqrs 
know!  in  server  side  Java  or  C++, 
knowl  in  developing  in  UNIX  or 
NT;  8  knowl  in  development 
using  object  oriented  analysis 
8  design  techniques.  Please 
submit  your  resume  8  salary 
requirements  to:  Melissa  Claeys, 
Art  Technology  Group,  One 
Broadway  St,  Cambridge,  MA 
02142;  Fax  (617)386-1112. 
Email  submittals  preferred  to 
mclaeys@atg.com.  Please  refer 
to  job  code  "NYI "  on  application. 
Please  visit  our  web  site  at 
iwww.atg.com.  Applicants  must 
have  proof  of  legal  authority  to 
work  in  the  US.  An  Equal 
Opportunity  Employer. 


InfiniSwitch  Corporation,  Inc.,  is 
a  leader  in  InfiniBand  switching 
technology  for  data  centers. 
InfiniSwitch  Corporation  is  com¬ 
mitted  to  delivering  world-class 
InfiniBand  (TM)  high  performance 
Storage  and  System  Area 
Network  switch  solutions  for 
commodity  server  farms  and 
clusters.  Our  people  make  us 
strong,  our  expertise  and  inno¬ 
vation  make  us  fast,  and  our 
experience  and  vision  keep  us 
on  target  to  deliver  world-class 
products.  We  are  currently  seek¬ 
ing  Software  Engineers  to  report 
to  our  Director  of  Software. 

Our  Software  Engineers  will 
develop  software  for  the  Network 
Management  portion  of  our 
InfiniSwitch  device;  working  with 
SNMP  architectures;  developing 
a  MIB;  assisting  in  introducing 
new  InfiniBrand  (TM)  centric 
management  activities;  and 
working  on  Embedded  Systems 
Software  and  Drivers.  Reqs:  MS 
(or  equiv)  in  any  computer  or  en¬ 
gineering  field  and  three  years  in 
the  job  or  in  software  develop¬ 
ment  or  programming  OR  BS  in 
same  field  and  five  years  pro¬ 
gressive.  relevant  experience. 
Should  have  expertise  in  C  or 
TCL.  Also  must  have  expertise 
with  either  (1)  embedded  net¬ 
work  management  implementa¬ 
tion  OR  (2)  with  development  of 
driver  software  for  802.ID  bridge 
or  IP  routing  path  as  well  as 
working  with  Ethernet  VLAN 
implementation  and  LINUX. 
Interested  applications  may  send 
their  resume  to  Betty  Kochergin, 
InfiniSwitch  Corporation,  134 
Flanders  Road,  Westborough,  MA 

com:  F  50^87o'*-3146” 


Full  time  Software/Web  Devel¬ 
oper  to  plan  and  develop  new 
computer  and  web  application  or 
upgrade  existing  computer  and 
web  application  using  Visual 
Basic  6.0,  C++,  Java,  HTML, 
JAVA  script,  VB  Script,  MS  Ac¬ 
cess,  Oracle  and  Dbase.  Must 
have  Bachelor’s  degree  in  IT,  CS 
or  related  field.  Must  have  1  year 
of  exp.  in  position  or  position  with 
same  duties.  Salary:  $67,045/yr. 
Serxf  resume  to:  Malix  Information 
Technology,  6050  McDonough 
Dr..  #0.  Norcross,  GA  30045 
Attn:  Rashid  Malix. 


SOFTWARE  ENGINEER  Two 
(2)  presently  needed.  Researches, 
designs  and  develops  computer 
software  systems,  in  conjunction 
with  hardware  product  develop¬ 
ment,  for  industrial,  commercial, 
and  business  applications,  ap¬ 
plying  principles  and  techniques 
of  computer  science,  engineer¬ 
ing,  and  mathematical  analysis. 
Master  of  Science  in  Computer 
Science,  Engineering  or  Math- 
related  and  2  years  of  Software 
Engineering  experience,  or 
the  equivalent  (A  Bachelor  of 
Science  in  Computer  Science, 
Engineering,  or  Math-related 
followed  by  5  years  of  Progressive 
Software  Engineering  Experi¬ 
ence).  Must  be  able  to  travel  and 
work  at  client  site  tor  many 
months  at  a  time.  Included  in  the 
2  years  job  experience  must 
have  2  years  experience  with 
C,C++,  Windows  SDK,  VC++, 
COM,  JAVA  and  ORACLE. 
$70,000/year.  Apply  by  resume 
to  Murali  K.  Suddala,  President, 
Capricorn  Systems,  Inc.,  3569 
Habersham-at-Northlake  Bldg. 
K,  Tucker  Georgia  30084. 


Computer  Programmer.  M.S. 
Computer  Science  or  related. 
Min.  2  yrs.  exp.  as  follows: 
designing  and  installing  networks; 
systems  administration;  Cisco 
2600  and  2500  series  routers: 
3Com  Layer  3  switch  (CoreBuilder 
3500);  3Com  Layer  switches 
(Super  Stack  3300  series);  Fast 
Ethernet  network  design  and 
installation;  Windows  NT  domain 
security,  remote  access  services, 
trust  relationships;TCP/IP,  SMTP/ 
POP3,  DNS,  DHCP,  WINS,  and 
internet  routing  protocols;  network 
management-SMS  and  MMC; 
Languages/Databases--C, 
Microsoft  Access;  Applications/ 
Application  Servers-Microsoft 
Internet  Information  Server  4, 
Microsoft  Exchange  Server, 
Microsoft  Proxy  Server,  Wintage 
Proxy  Server,  Winproxy  Internet 
proxy  server  and  firewall, 
MDaemon  Internet  mail  server, 
Microsoft  Frontpage  2000, 
Microsoft  Office  2000.  Sal. 
$69,700.  Send  resume  to:  Job  6, 
PO  Box  5275,  New  York,  NY 
10185-5275. 


Software  Engineer 

Analyze,  design,  develop  8  test 
software  for  GUI.  Develop  soft¬ 
ware  packages  for  CFD  appl., 
incl.  geometric  modeling,  solid 
modeling,  8  grid  generation  8  vi¬ 
sualization.  Create  direct  (proE, 
UniGraphics)  8  indirect  (CIF, 
DGSII,  DXF  8  IGES)  interfaces 
w/CAD  8  ECAD  design  tools. 
Must  have  M.S.  in  CS,  ME  or  rel. 
8  6  mos.  exp.  in  above  pos.  or  rel. 
w/abil.  to  use  C,  C++,  Unix, 
OpenGL,  Windows  NT,  Linux,  Vi¬ 
sual  C++,  CFD-ACE+. 

40.0  hr/wk.  8:00  -  5:00 

Applicants  send  resume  to: 
Kathy  Short 
HR  Manager 

CFD  Research  Corporation 
215  Wynn  Dr. 
Hunstville,  AL  35805 


♦ 


Software  Engineers  wanted  by 
consulting  co  in  Philadelphia, 
PA.  Must  have  Bachelor's  degree 
in  Comp  Sci  or  Comp  Eng.  or 
any  engineering  field  and  3  yrs 
of  software  related  experience. 
Respond  to:  Ravi  Jaganmohan, 
Object  Xperts,  2  Penn  Plaza. 
Suite  200,  Philadelphia,  FA  19102. 


VP,  Enterprise  Sales 
Founded  in  1996  address  the 
growing  cost  of  software  and 
application  development  eRUN- 
WAY  defines,  designs,  develops, 
and  deploys  a  wide  range  of 
high-volume  software  solutions, 
drawing  on  highly  skilled  devel¬ 
opers,  engineers,  and  project 
managers  from  around  the 
world.  The  company  offers 
around-the-clock,  cost-effective 
software  and  application  devel¬ 
opment  services  through  its 
Advanced  Technology  Centers 
in  the  U.S.  and  offshore.  We  are 
currently  seeking  a  VP  Enter¬ 
prise  Sales  to  lead  and  manage 
our  business  development  team 
and  devise  company  marketing, 
sales,  revenue  goals.  Candidates 
must  have  expertise  in  business 
management/development  and 
in  offshore  technology  services 
delivery.  Bachelor’s  degree  (or 
equiv)  in  tech  or  engineering 
field  and  MBA  9or  equiv) 
required  as  well  as  six  years 
relevant  experience  in  biz  devel¬ 
opment  tor  IS/IT  related  firms. 
Frequent  domestic/int’l  travel. 
Send  resumes  to  Director  of 
Human  Resources,  eRunway, 
Inc.,  2000  West  Park  Drive, 
Westborough,  MA  01581.  FAX 
1-508-366-9901. 


Multiple  openings  for  Prog/Sys 
Analysts,  DBA's,  Sys/Admin  and 
S/W  Engineers  to  design/develop 
S/W  appis  using  some  of  the 
following  -  Cobol,  CICS,  DB2; 
Java,  PB,  HTML,  XML;  data 
warehousing,  cognos;  wireless/ 
web  technologies;  C++,  VB, 
Developer  2000;  SAP,  ABAP/4; 
Oracle/Sybase/Informix  DB 
admin;  Unix/NT  system  admin; 
Net. Commerce,  MQSeries, 
Websphere;  BS/MS  or  equiva¬ 
lent  in  CS,  Engg,  Science, 
Math  or  Bus  Admin  req.  Salary 
commensurate  with  exp.  F/T. 
Travel/relocation  involved. 
Resumes  to:  HR,  Smartsoft 
International  4898  South  Old 
Peachtree  Road,  Suite  200, 
Norcross,  GA  30071 . 


Software  Engineer 
Design,  implement  and  test 
embedded  software  for  high 
performance  wireless  switching 
product.  Must  have  Master’s 
degree  in  CS,  CE,  EE  or  related 
degree.  Employer  will  accept 
Master’s  degree  or  its  equivalent 
in  a  Bachelor's  degree  followed 
by  five  yrs  progressive  experi¬ 
ence  in  the  field.  Send  resume 
to  Vijay  Kathuria,  NuLink,  Inc., 
187  Ballardvale  Street,  Wilming¬ 
ton,  MA  01887 


NorthPoint  Domain  Inc.,  in  Boston, 
a  web  technology  company 
focused  on  ten  specialty  markets 
is  in  need  of  a  Vice  President, 
Operations  Development.  This 
individual  will  manage  all  aspects 
of  the  technology  team  and 
the  web  product  development 
process,  as  well  manage  the 
operations  and  member  services 
functions.  College  Degree,  pro¬ 
ject  management  and  industry 
experience  required.  Interested 
candidates  should  forward 
resume  to:  HR  Manager,  Human 
Resources  and  Office  Adminis¬ 
tration,  North  Point  Domain  Inc., 
One  Joy  Street,  Boston,  MA 
02108;  careers  @  nodinc.com. 
Phone  inquires  will  not  be 
accepted. 


Call  your 
ITcareers  Sales 
Representative 
1-800-762-2977 


Several  computer  related 
positions  available  for  large 
transportation  and  logistics 
services  company.  Degree, 
technical  skills  &  experience 
vary  per  positions.  Send  re¬ 
sume  to  Human  Resources, 
Ref.#  SK(G)  at  United  Parcel 
Service,  2010  Warsaw 
Road,  Roswell,  GA  30076. 


Junior  Consultant,  Development, 
/tesist  in  the  design,  development, 
implementation  and  maintenance 
of  workflow  technologies  based 
upon  the  analysis  of  business 
requirements  and  emerging 
technologies.  Requires:  M.S. 
degree  in  Comp,  or  Info.  Science 
or  related  field.  Coursework 
must  include  graduate  classes 
in:  Operating  Systems,  Data 
Communication  Networks  and 
Software  Components  8  Data 
Structure.  EOE.  40  hrs/wk. 
Salary:  $53,000/yr.  Send  resume 
(no  calls)  to:  KB,  HealthScribe, 
Inc.,  403  Glenn  Drive,  Suite  10 
Sterling,  VA  20164. 
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Kama  Consulting  Inc. 

TOP  S$’s,  \N2  or  1099 


We  are  a  fast  growing 
Consulting  company  based 
in  New  Jersey. 
Excellent  opportunities  for 
Programmers, 

Systems  Analysts,  DBAs. 

Sun  Solaris  System  Admins, 
Natural,  Powerbuilder, 
ADABAS,  ORACLE,  SYBASE, 
PROGRESS,  COBOL 
TCP/IP,  DelphiA/B,  Windows  NT 

Send  your  resume  to 
Rod  McFadden 
Kama  Consulting 
Fax:201-934-7166 
Email :  Kamaco  @  aol.com 


Compsoft  Technology  Solutions 
Group,  Inc.  seeks  experienced 
Programmer  Analysts,  DBAs 
and  Software  Engineers  to 
develop  and  design  software 
systems  using  some  of  the 
following:  C,  C++,  VB,  Oracle, 
Developer  2000,  Java,  PL/SQL, 
MS  Access,  MS  SQL,  internet/ 
wireless  technologies,  Windows/ 
UNIX  admin  for  Data  warehousing 
etc.  Require  BS/MS  or  foreign 
equiv.  Highly  competitive 
salaries,  some  travel  and 
relocation  to  client  sites  involved. 
Send  Resumes  to:  1 1  N  Roselle 
Road,  Schaumburg,  IL  60194. 


NEED 

TO  HIRE. 

careers.com 

START 

WITH  US. 


You 

can 

find 

a 

better 

JOB 

with 

one 

hand 

tied 

behind 

your 

back. 


Just  point  your 
mouse  to  the 
world’s  best 
IT  careers  site. 

Brought  to 
you  by 

Computerworld, 
Info  World  and 
Network  World. 


Find  out  more. 

Call  your 
ITcareers  Sales 
Representative 
or  Janis  Cro-wley, 
1-800-762-2977 


Where  the  best 
get  better 
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sion.com/seminars. 


P4| 


39® 

Wofid  by  ordering  reprints  ot  your  editorial 
mentions.  Reprints  make  great  marketing 
materials  and  are  available  in  quantities  of 
500  and  up.  To  order,  contact  Reprint 
Management  Services  at  (717)  399-1900  x124 
or  E-mail;  rtry@rmsreprints.com 


Lightreading 

MSI 

Metamerge 

Net  to  Net  Technologies 

NetCalibrate 

NetlO  Corp 

NetScout 

NuSphere 

Opalis  Software 

Oracle 

Radware 

Riverstone  Networks 

SAP 

Siemens 

Stlverback 

Sprint 

Stalker  Software 
Sumitomo  Electric  Lightwave 
Surf  Control 
Swicth  and  Data 
Sygate Technologies.  Inc 
Symantec 

Telogy  Networks.  Inc 
WaveSmith  Networks 
Web  Ev^t 
Wilson  WindowWare 
Zuma  Networks 


These  irxlexes  are  provided  as  a  reader  service.  Although  every 
effort  has  been  made  to  make  them  as  complete  as  possible,  the  pub¬ 
lisher  does  not  assume  liability  for  errors  or  omissions. 

*lndicates  Regional  Demographic 


■  Network  World,  Inc. 

IISTurnpike  Road,  Southborough,  MA  01772 
Phone:  (508)  460-3333 

TO  SEND  E-MAIL  TO  NWW  STAFF 

firstnarTie_lastname@nww.com 

EvileeThibeault.  CEO/Publisher 

John  Gallant,  President/Editorial  Director 

Eleni  Brisbois,  Administrative  Planning  Manager 

FINANCE 

Mary  Fanning,  Vice  President  Finance 
Paul  Mercer,  Finance  Manager 
Mary  Kaye  Newton,  Billing/AP  Coordinator 
HUMAN  RESOURCES/BUSfNESS  SERVICES 
Monica  Brunaccini,  V.  P.  H.R./Business  Services 
Elizabeth  Price,  Human  Resources  Manager 
Eric  Cormier,  Human  Resources  Representative 
Frank  Coelho,  Business  Services  Manager 
LisaThompson,  Business  Services  Administrator 
Mark  Anderson,  Business  Services  Supervisor 
Kevin  McMillen,  Business  Services  Coordinator 
MARKEHNG 

TerryAnn  Croci,  Director  of  Marketing 

Wendie  Larkin,  Senior  Public  Relations  Manager 

Barbara  Sullivan,  Senior  Research  Analyst 

Johanna  Lombardi,  Marketing  Communications  Manager 

Donna  Kirkey,  Senior  Design  Manager 

Kristin  Wattu,  Senior  Marketing  Specialist 

Judy  Schultz,  Senior  Graphic  Designer 

Cindy  Panzera,  Graphic  Designer 

Nancy  Petkunas,  Marketing  Specialist 

GLOBAL  PRODUCT  SUPPORT  CENTER 

Nancy  Parquette,  Corporate  Programs  and  Events 

Manager 

ADVERTISING  OPERATIONS 

Karen  Lincoln,  Senior  Director  of  Advertising  Operations 
Maro  Eremyan,  Advertising  Coordinator 
JamiThompson,  Advertising  Coordinator 
VeronicaTrotto,  Direct  Response  Ad  Coordinator 
Cheryl  Hill, Traffic  Coordinator 
PRODUCTION 

Ann  Finn,  Senior  Production  Director 

Greg  Morgan,  Production  Manager 

Mike  Guerin,  Senior  Print  Buying  Supervisor 

CIRCUUTION 

Richard  Priante,  Senior  Director  of  Circulation 
Darcy  Beach,  Circulation  Operations  Manager 
Bobbie  Cruse,  Subscriptions  Manager 
Mary  Mclntire,  Senior  Marketing  Specialist 

RESEARCH 

Ann  MacKay,  Research  Director 

DISTRIBUTION 

BobWescott,  Distribution  Manager/(508)879-0700 

IDG  LIST  RENTAL  SERVICES 

Paul  Capone,  Account  Executive 

P.O.  Box  9151,  Framingham,  MA  01701-9151 

(800)  343-6474/(508)  370-0825,  FAX:(508)  370-0020 

SEMINARS  AND  EVENTS 

Robin  Azar,  Vice  President  of  Events 

Michele  Zarella,  Director,  Events  Business  Development 

Sandra  Gittlen,  Events  Editor 

Betty  Amaro-White,  Event  Finance  Manager 

Andrea  D'Amato,  Sales  Director/Strategic  Partnerships 

Kristin  Ballou,  Senior  Event  Sales  Manager 

Sandy  Weill,  Event  Sales  Manager 

Tricia  Fiscale,  Sales  and  Marketing  Coordinator 

Debra  Becker,  Dir.,  Marketing  &  Audience  Development 

Amy  Letichevsky,  Marketing  Manager 

Timothy  Johnson,  Marketing  Coordinator 

Kevin  dilligan,  Director,  Events  Operations 

Andrea  Fusco,  Registration  Manager 

Jill  Keaveney,  Senior  Event  Planner 

Tim  DeMeo,  Event  Coordinator 

ONLINE  SERVICES 

Alonna  Doucette,  V.P.,  Online  Services 

Hillary  Freeley,  Director,  Online  Audience  Development 

Charley  Spektor,  Director,  Business  Development 

Adam  Gaffin,  Executive  Editor,  Online 

Melissa  Shaw,  Managing  Editor,  Online 

Jason  Meserve,  Multimedia  Editor 

Sheryl  Hodge,  Online  Copy  Chief 

Carryl  Hauser,  Online  Copy  Editor 

Mario  Matoska,  Senior  Web  Producer 

Katherine  Ward,  Web  Producer 

Christopher  Cormier,  Web  Producer 

Kris  Guay,  Associate  Web  Producer 

Elaine  Valovic,  Web  Researcher 

INFORMATION  SYSTEMS/NEW  MEDIA  SERVICES 

W.  Michael  Draper,  V.  P.  Systems  iTechnology 

Tom  Kroon,  Senior  Software  Engineer/Architect 

Bob  Roddy,  Web  Software  Engineer 

Manav  Sehgal,  Web  Software  Engineer 

William  Zhang,  Senior  Software  Engineer 

Rocco  Bortone,  Senior  Network  Manager 

Peter  Hebenstreit,  Network  Specialist 

Kevin  O'Keefe,  Systems  Support  Manager 

Brian  Wood.  Senior  Systems  Support  Specialist 

Joshua  Mason,  Systems  Support  Specialist 

Puneet  Narang,  Manager  of  DatabaseTechnologies 

Pam  Gertsios,  Database  Specialist 

Anne  Nickinello,  Director  of  New  Media  Services 

Deborah  Vozikis,  New  Media  Design  Manager 

Sean  Landry,  Web  Producer 

Michael  Ferreira,  Graphics  Production  Coordinator 


■  IDG 

Patrick  J.  McCavem.  Chairman  of  the  Board 
Kelty  Coiilin.  CEO 

Network  World  is  a  publication  of  IDG.  the  world's  largest 
publisher  of  computer-related  information  and  the  leading 
global  provider  ot  information  services  on  information  tech¬ 
nology.  IDG  publishes  over  275  computer  publications  in  75 
countries.  Ninety  million  people  read  ooe  or  more  IDG  publi¬ 
cations  each  month.  Network  World  contributes  to  the  IDG 
News  Servce.  offering  the  latest  on  domestic  and  interna 
tional  computer  news. 


Sales  Offices 


Carol  Lasker,  Associate  Publisher/Vice  President 
JaneWeissman.  Sales  Operations  Coordinator 
Internet:  ctasker,  jweissman@nww.com 
(508)  460-3333/FAX:  (508)  460-1237 

New  York/New  Jersey 

Tom  Davis,  Associate  Publisher.  Eastern  Region 

Elisa  Della  Rocco.  Regional  Sales  Manager 

Terry  Sanders,  Account  Executive 

Atmee  Jacobs,  Sales  Associate 

Internet:  tdavis,  elisas,  tsanders,  ajacobs@nww.com 

(201)  587-0090/FAX:  (201)  712-9786 

Nortlieast 

Donna  Pomponi,  Regional  Sales  Manager 

Kathryn  Zinn,  District  Manager 

John  Mahoney.  Account  Executive 

Caitlin  Morgan,  Sales  Assistant 

Internet:  dpomponi,  kzinn,  jmahoney,  chorgan@nww.com 

(508)  460-3333/FAX:  (508)  460-1237 

Mid-Atlantic 

Jacqui  DiBianca,  Regional  Sales  Manager 
Marta  Hagan,  Sales  Assistant 
Internet:  jdibian,  mhagan@nww.com 
(610)  971-1530/FAX:  (610)  975-0837 

Midwest/Maryland 

Eric  Danetz,  Senior  District  Manager 
Aimee  Jacobs,  Sales  Associate 
Internet:  edanetz,  ajacobs@nww.com 
(201)  587-0090/FAX:  (201)  712-9786 

Central 

Dan  Gentile,  Midwest  Regional  Director 
Grade  Vela,  Sales  Assistant 
Internet:  dgentiie,  gvela@nww.com 
(512)  249-2200/FAX:  (512)  249-2202 

Northern  California 

Sandra  Kupiec,  Associate  Publisher,  Western  Region 

Miles  Dennison,  Regional  Sales  Manager 

Sean  Weglage,  Senior  District  Manager 

Carmela  Baglione,  Account  Executive 

Luisa  Luk,  Account  Executive 

Cathy  Song,  Account  Executive 

Tina  Barnes.  Sales  Operations  Manager 

Celina  Esquivias.  Sales  Assistant 

Internet:  skupiec,  mdennison,  sweglage,  cbaglione,  lluk, 

csong,  tbarnes,  cesquivias@nww.com 

(650)  577-2700/FAX:  (650)  341-6183 

Northwest/Rockies 

Karen  Wilde,  Regional  Sales  Manager 
Lara  Greenberg,  Regional  Sales  Manager 
Kim  Gaffrey,  District  Manager 
Internet:  kwilde,  Igreenberg,  kgaffrey  @nww.com 
(650)  577-2700/FAX:  (650)  341-6183 

Southwest 

Becky  Bogart  Randell,  District  Manager 
Angela  Norton,  Sales  Assistant 
Internet:  brandell,  anorton@nww.com 
(949)  250-3006/FAX:  (949)  833-2857 

Southeast 

Don  Seay,  Regional  Sales  Manager 
Internet:  dseay@nww.com 
(404)  845-2886/FAX:  (404)  250-1646 

Custom  Publishing 

Shaun  Budka,  Custom  Media  Solutions  Manager 
Internet:  sbudka@nww.com 
(508)  460-3333/FAX:  (508)  460-1237 

Fusion 

James  Kalbach,  Director,  of  Online  Sales 
Jeff  Schwartz,  Online  Account  Manager 
Stephanie  Gutierrez,  Online  Account  Manager 
Debbie  Lovell.  Online  Account  Manager 
Kristin  Baker,  Online  Operations  Manager 
Internet:  jkalbach,  jmschwartz, 
sgutierrez,  diovell,  kbaker@nww.com 
(610)  341-6025/FAX:  (610)  971-0557 


MARKETPLACE 

Response  Card  Decks/MarfcetPlace 

Richard  Black,  Director  of  Marketplace 

Karima  Zannotti,  Senior  Account  Manager 

Enku  Gubaie,  Senior  Account  Manager 

Cara  Peters,  Account  Manager 

Amie  Gaston,  Account  Manager 

Sharon  Stearns.  Sr.  Media  Dev.  A  Operations  Mgr. 

Chris  Gibney,  Sales  Operations  Coordinator 
Internet:  rblack,  kzannott,  egubaie,  cpeters, 
agaston,  ssteams,  cgibney@nww.com 
(508)  460-3333/FAX:  (508)  460-1192 

IT  CAREERS 

VP/General  Manager,  Janis  Crowlev.  East  Regional  Manager. 
Deanne  Holzer,  Midwest  Regional  Manager,  Laura  Wilkinson, 
Western  Regional  Manager,  Donna  Ougo.Vi/estem  Account 
Manager,  Whitney  Nagy,  Marketing  Director,  Kelli  Flanagan, 
Operations  Manager,  Donna  Kent,  Advertising  Coordinator, 
Leilani  Lopez,  Advertising  Coordinator,  Carla  Amaral,  Marketing 
Specialist,  Heidilanakatsubo,  Sales  Support. Tina  Silveira, 
Sales  Support.  Nikki  W»lson(800)  762-2977/FAX:  (650)  286-2770 


m  NttworkWoHu 


10/1/01 


News 


www.nwfusion.com  | 


'Net  authentication  gains  attention 

New  alliance  to  focus  on  identity  managennent,  could  challenge  Microsoft's  Passport 


Checking  IDs 

The  Liberty  Alliance  Project,  established  last  week  by  33 
vendor  and  end-user  organizations,  has  three  goals  in 
creating  an  identity  system  that  can  function  across 
the  Internet. 


1  Allow  individual  consumers  and  businesses  to  maintain  personal 
information  securely. 

2  Provide  a  universal  open  standard  for  single  sign-on. 

3  Provide  an  open  standard  for  network  identity  spanning  all 
network  devices. 


■  BY  JOHN  FONTANA 

The  topic  of  user  authentication 
on  the  Internet  ignited  last  week 
as  Sun  and  32  other  end-user  and 
vendor  organizations  joined 
forces  —  called  the  Liberty  Alli¬ 
ance  Project  —  to  create  a  uni¬ 
versal  single  sign-on  mechanism. 

The  previous  week,  Microsoft 
announced  plans  to  open  its 
Passport  authentication  service 
to  make  it  part  of  an  Internet-wide 
identity  system.  AOL Time  Warner 
is  said  to  be  working  on  a  similar 
project  called  Magic  Carpet. 

The  Liberty  Alliance  Project, 
launched  last  week  by  Sun,  Gen¬ 
eral  Motors,  Bank  of  America, 


Servers 

continued  from  page  14 

partitioning  capabilities.  Regatta 
features  a  self-healing  system,  a 
network  of  more  than  5,600  sen¬ 
sors  spread  throughout  the  serv¬ 
er  to  detect  internal  errors  and 
take  corrective  action. 

Regatta  will  compete  with 
Sun’s  Sun  Fire  15K,  which  fea¬ 
tures  16  to  106  of  the  company’s 
UltraSparc  111  900-MHz  Reduced 
Instruction  Set  Computing 
(RISC)  processors.  The  server  is 
the  company’s  largest  ever. 

HP  has  its  16-way  rp8400  Unix 
server  and  Superdome,  which 
boasts  64  processors.  The  Sun 
Fire  15K  can  be  divided  into  18 
partitions;  HP’s  Superdome  cur¬ 
rently  supports  16. 

While  hardware  and  power  are 
differentiators  (see  graphic),  a 


American  Airlines  and  others, 
was  long  on  promises  and  short 
on  details.  That  led  many  to  be¬ 
lieve  it  was  a  hasty  reaction  to 
Microsoft’s  change  in  stance  on 
Passport,  which  has  been  criti¬ 
cized  for  privacy  and  other  issues. 

Authentication,  which  is  synon¬ 
ymous  with  identity  manage¬ 
ment,  is  designed  to  validate  end 
users’  identities,  and  provide  pref¬ 
erences  and  profiles  to  get  per¬ 
sonalized  service  on  the  Internet 
and  corporate  networks. 

It’s  key  for  managing  Web  ser¬ 
vices,  which  promise  to  deliver 
software  as  a  service  over  the 
Internet,  and  e-commerce.  Both 
require  a  connection  with  an  au- 


major  variation  between  the 
three  companies  is  their  operat¬ 
ing  system  and  processor  strate 
gies. 

HP  has  pledged  future  support 
for  Intel’s  Itanium  Processor 
Family  and  Windows  on  Super- 
dome  and  the  rp8400.  Sun  is  vig¬ 
ilant  in  its  support  of  Solaris  and 
its  RISC  processor  family,  the 
UltraSparc.  Regatta  uses  AIX  5L, 
IBM’s  Unix,  and  will  support 
Linux  in  a  future  release. 

Those  differences  should 
affect  the  way  users  plan, 
experts  say.  For  example,  a  com¬ 
pany  looking  to  use  a  server 
partition  to  support  Windows 
and  Unix  in  the  future  may  want 
to  look  at  HP’s  systems,  says 
Steve  Josselyn,a  research  direc¬ 
tor  at  IDC.  “Anyone  who  buys 
into  the  HP  product  family  will 
have  the  ability  to  run  Windows 


thenticated  user  to  control  access 
to  services  and  track  billing. 

“If  we  are  going  to  go  beyond 


or  Unix  [in  the  future].” 

At  least  one  user  likes  having 
the  option  of  running  Windows 
programs. 

“We  do  research  and  develop¬ 
ment  for  the  Navy  specifically  in 
signal  and  image  processing 
and  command,  control  and 
communications,”  says  Lynn 
Parnell,  program  manager  at  the 
Navy  High  Performance  Com¬ 
puting  Office  in  San  Diego. 
“Both  of  these  areas  require 
high-performance  computing 
capability  where  we  use  emula¬ 
tion.  In  particular  the  Navy  has 
embarked  [on  a  program]  to 
put  in  Windows-based  mach¬ 
ines.  When  Superdome  runs 
Windows  under  the  Intel 
McKinley  platform,  we  will  be 
able  to  migrate  Unix  software 
and  systems  to  Windows.” 

Other  users  are  looking  to  con- 


the  content  stage  of  the  Web  and 
have  applications  run  within  the 
the  Web,  then  managing  identity 


solidate  systems.  HP  and  Sun 
will  not  only  have  to  convince 
users  that  Unix  is  up  to  the  task 
of  serving  as  a  viable  alternative 
to  the  mainframe,  but  that  con¬ 
solidation  is  a  cost-effective 
alternative.  And  shipping  sys¬ 
tems  that  run  Unix  rather  than  a 
proprietary  mainframe-based 
operating  system  appears  to  be 
at  the  heart  of  that. 

Consolidation  has  not  been 
very  popular  in  Windows  envi¬ 
ronments  because  “Windows  sys¬ 
tems  need  to  be  periodically 
rebooted  to  clean  up  memory, 
and  you  can’t  partition  to  keep 
workloads  separate  on  Windows 
servers,”  says  Aberdeen  Group 
research  director  Gordon  Haff.  ■ 
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is  one  of  the  more  crucial  prob¬ 
lems  to  solve,”  says  Jamie  Lewis, 
president  of  The  Burton  Group. 

“The  benefit  to  having  an  au¬ 
thentication  system  that  works 
across  the  Web  is  that  it  reduces 
the  cost  of  administering  sys¬ 
tems,”  says  Tony  Scott,  CTO  for  in¬ 
formation  and  systems  at  GM. 
“Identity  management  takes  the 
hassle  and  complexity  out  of 
managing  user  and  personal 
information.” 

Today  GM  incurs  the  overhead 
of  administering  access  for  part¬ 
ners  to  tap  into  its  network.  Scott 
says  an  identity  management  sys¬ 
tem  would  greatly  reduce  that 
overhead. 

But  developing  a  standard  sys¬ 
tem  won’t  be  easy  Other  efforts 
including  Secure  Multi-purpose 
Internet  Mail  Extensions  for 
secure  mail  and  Kerberos  — 
itself  an  authentication  mecha¬ 
nism  —  have  failed  to  scale  to 
the  Internet. 

Many  experts  are  encouraged 
by  the  interest  in  identity  man¬ 
agement  from  major  vendors, 
but  fear  it  could  degenerate  into 
a  quagmire  that  fails  to  produce 
a  universal  system. 

“We  don’t  want  a  Java  vs.  [Com¬ 
ponent  Object  Model]  battle  to 
come  into  identity  management,” 
says  Dana  Gardner,  an  analyst 
with  Aberdeen  Group  “We  need  a 
public  standard  administered 
through  some  quasi-indepen- 
dent  group."  ■ 
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Server  deluxe 


New  high-end  servers  from  Sun,  HP  and  IBM  compete  for  transaction  and  scientific 
computing  appiications. 


Feature 

Sun  Fire  15K 

IBM  Regatta 
pSerles  eServer 

HP  Server  rp8400 

Processor  type 

Sparc  III 

Power4 

PA-RISC  current;  PA- 
RISC  and  Itanium  (future) 

Number  of  processors 

16  to  106 

32 

16 

Number  of  partitions 

18 

N/A 

2  to  16 

Processor  speed 

900  MHz  to  1.5  GHz 

1  GHz  current 

750  MHz 

Memory 

576G  bytes: 

1  terabyte  (future) 

64G  to  256G  bytes 

256G  bytes; 

1  terabyte  (future) 

!  Operating  system 

* 

Solaris 

AIX  5L  and  Linux 
Linux  (future) 

HP-UX  Hi;  Windows  and 

From  $73,000  to  $251,000 

N/A 

Starts  at  $124,000 

■  Network  World  118  Turnpike  Road. 
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Exchange 

continued  from  page  1 
the  .Net  platform." 

in  essence,  Exchange  becomes  a  service 
to  a  much  broader  development  platform 
than  it  creates  by  itself. 

Development  tool  vendor  IT  Factory  will 
demonstrate  during  the  conference  key¬ 
note  address  a  .Net  application  that  uses  a 
series  of  Web  services  developed  on  top 
of  Exchange.  In  this  example,  the  Web  ser¬ 
vices  will  be  used  to  locate  satelliteTV 
installers,  check  their  calendars  and 
schedule  time  for  work  to  be  completed. 

Development  tool  vendor 
IT  Factory  will  demon¬ 
strate  at  the  conference 
keynote  address  a  .Net 
application  that  uses  a 
series  of  Web  services 
deveioped  on  top  of 
Exchange. 

The  services  also  rely  on  other  .Net 
servers  including  Win  2000/ Active  Direct¬ 
ory  to  identify  qualified  installers  and 
Mobile  Information  Service  for  wireless 
notification,  but  Exchange  handles  the 
workflow, scheduling  and  messaging. 

“The  whole  concept  of  Web  services  is 
abstracting  the  technology  and  creating 
an  interface  any  application  can  use,” says 
Robert  Ginsburg,  CTO  of  IT  Factory.  “The 
Web  services  provide  access  to  Ex¬ 
change’s  scheduling,  task  management, 
messaging.Those  collaborative  pieces  be¬ 
come  a  middleware  API  or  Web  service.” 

Exchange  evolution 

And  those  Web  services  open  possibili¬ 
ties,  such  as  running  Exchange  services 
across  corporate  boundaries  and  seam¬ 


lessly  adding  and  deleting  items  on  calen¬ 
dars  between  partners  —  a  task  that  can¬ 
not  be  done  today 

“In  Exchange  you  have  all  this  data  and 
these  services,  and  you  would  like  to  use 
that  in  other  places.You  can  start  to  do  that 
with  Web  services,”  says  Chris  Baker,  lead 
product  manager  for  Exchange. 

As  part  of  the  evolution.  Exchange  will 
undergo  some  structural  changes,  losing 
its  message  and  data  store  called  the  Web 
Storage  System,  instead  relying  on  an  SQL 
Server-based  technology  code-named 
Yukon,  a  universal  repository  that  stores 
structured  and  unstructured  data.  How¬ 
ever,  the  transformation  won’t  happen  for 
a  couple  of  years,  according  to  Baker. 

Yukon  will  become  an  underlying  data 
storage  service  of  .Net,  a  kind  of  object 
store  that  can  hold  various  file  formats, 
store  and  process  native  XML  data,  and 
be  accessed  by  a  host  of  wired  and  wire¬ 
less  devices. 

Microsoft  will  have  to  clearly  articulate 
the  .Net  benefits  to  the  corporate  user, 
something  that  it  has  not  done  effectively 

“We  are  not  so  concerned  with  how  to 
code  Web  services,  we  want  to  see  how 
.Net  translates  into  our  business  strategy, 
how  it  improves  collaboration  and  knowl¬ 
edge  sharing,”  says  one  IT  executive  who 
asked  not  to  be  named.  “We  think  it  will 
be  2003  before  we  can  really  think  about 
implementing  any  of  this  stuff.” 

But  Microsoft  is  planting  the  seeds  for 
evolution.  In  Orlando,  it  will  hand  out  an 
Exchange  Developer  Enablement  Kit  that 
will  include  sample  code  and  resources 
that  detail  how  to  build  Web  services  on 
top  of  Exchange.  One  of  those  samples  is 
a  Web  service  that  looks  up  free/busy  time 
on  a  calendar.  Other  Web  services,  such  as 
searching  contact  information  and  engag¬ 
ing  workflow  services,  will  follow,  com¬ 
pany  officials  say. 

Conference  preview 

Also  on  the  agenda,  Microsoft  is 
expected  to  announce  that  it  has  com¬ 
pleted  development  of  its  Application 
Management  Pack  for  Microsoft  Opera¬ 
tions  Manager  (MOM).  The  pack,  which 


Exchange  in  a  .Net  world 

Microsoft  this  week  wiii  iay  out  the  future  of  Exchange  as  a  key  piece  of  its 
.Net  piatform  for  supporting  Web  services.  In  essence,  Exchange  wiii  become 
a  moduie  providing  its  caiendaring,  messaging  and  workflow  services  as 
Web  services  and  chunks  of  code  that  can  be  reused  in  multiple  applications. 
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will  ship  before  year-end,  includes  an  Ex¬ 
change  module  for  monitoring  the 
events  and  performance  of  the  server. 
MOM  provides  a  single  view  of  the 
Exchange  system,  helps  monitor  service- 
level  agreements  and  provides  alerts 
before  trouble  occurs. 

Microsoft  also  will  announce  beta  2  of 
Mobile  Information  Server  2002,  which 
will  support  wireless  synchronization  be¬ 
tween  PocketPC  2002  devices  and  Ex¬ 
change  server. 

Also,  Service  Pack  2  for  Exchange  2002 
will  not  be  released  at  the  show  but  will 


ship  before  year-end.  It  includes  enhance¬ 
ments  to  Outlook  Web  Access  and  a  merg- 
ers-and-acquisition  migration  tool  for 
merging  one  Exchange  2000  environment 
into  another. 

Microsoft  also  will  detail  forthcoming 
Exchange  support  for  Windows  .Net 
Server,  expected  to  ship  early  next  year.  ■ 
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Isn't  it  time  you  combined  your  separate  networks  into  one  powerful  and  integrated 
enterprise  network?  With  Cisco  IPTelephony,  you'll  cut  costs  and  discover  entirely  new 
ways  to  compete  -  enabling  a  whole  new  class  of  powerful  applications  never  before 
conceivable  on  separate  networks.  With  Cisco  AVVID  enterprise  architecture,  you  can  do 

i 

!  all  this  without  any  disruption. This  standardized  enterprise  architecture  allows  you  to  seamlessly  integrate  voice,  video,  wireless 

f 

j  and  data  applications  on  a  single,  scalable  network.  This  includes  new  and  existing  technologies  alike.  Whether  you're  building 

j  your  enterprise  network  or  extending  it  with  Cisco  Powered  Network  services,  take  advantage  of  the  tools  below  to  get  it  done  right. 
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